CVE-2019-20009

Summary

An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_SPLINE_private in dwg.spec.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/LibreDWG/libredwg/compare/0.9.2…0.9.3
• https://github.com/LibreDWG/libredwg/issues/176
• https://github.com/LibreDWG/libredwg/issues/176#issue-541977765
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html

References

• https://github.com/LibreDWG/libredwg/compare/0.9.2…0.9.3
• https://github.com/LibreDWG/libredwg/issues/176
• https://github.com/LibreDWG/libredwg/issues/176#issue-541977765
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html
• http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html

• ←Previous
• Next→