CVE-2019-20013

published 2019-12-27

CVE-2019-20013: An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in decode_3dsolid in dwg.spec.

medium 6.5 CVSS 3.1

AV N AC L PR N UI R S U C N I N A H

An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in decode_3dsolid in dwg.spec.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
gnu	libredwg	< 0.9.3	0.9.3
opensuse	backports_sle	—	—
opensuse	leap	—	—

CWE-770