CVE Daily

CVE-2019-20015

An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an atte...

Medium CVSS 6.5

Overview

An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_LWPOLYLINE_private in dwg.spec.

CWE: CWE-770 Published: 2019-12-27T01:15:13.647
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.5 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags