PT-2020-10872 · Gnu · Gnu Libredwg

Skyvast404 · Published 2020-07-16 · Updated 2020-07-22 · CVE-2019-20914

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions through 0.9.3

Description An issue was discovered in GNU LibreDWG. There is a NULL pointer dereference in the function dwg encode common entity handle data in common entity handle data.spec.

Recommendations For GNU LibreDWG versions through 0.9.3, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2019-20914

Affected Products

Gnu Libredwg

References · 5

• 🔥 https://github.com/LibreDWG/libredwg/issues/178 · Exploit
• https://github.com/LibreDWG/libredwg/commit/3b837bb72d6b9ab4d563faa211f90efc257e3c96 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2019-20914 · Security Note
• https://osv.dev/vulnerability/CVE-2019-20914 · Vendor Advisory
• https://t.me/cibsecurity/13512 · Telegram Post