CVE-2020-21815

MediumCVSS 6.5

Published: 17/05/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.90%

56th percentile - higher than 56% of all known CVEs

Summary

In GNU LibreDWG version 0.10.2641, a null pointer dereference issue exists in the output_TEXT function at dwg2SVG.c:114, causing a denial of service via application crash.

Risk Assessment

An attacker can crash an application using this library, leading to service disruption and potential loss of availability.

Recommendation

It is recommended to update GNU LibreDWG to the latest available version containing a fix for this bug, or apply temporary mitigations such as input validation.

Original NVD description (English source)

A null pointer deference issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114, which causes a denial of service (application crash).