CVE-2020-21817

MediumCVSS 6.5

Published: 17/05/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.90%

56th percentile - higher than 56% of all known CVEs

Summary

A null pointer dereference issue exists in GNU LibreDWG version 0.10.2641 via htmlescape in escape.c:29. This flaw causes a denial of service (DoS) through application crash.

Risk Assessment

An attacker can exploit this vulnerability to intentionally crash applications using LibreDWG, potentially disrupting system or service availability.

Recommendation

It is recommended to update GNU LibreDWG to the latest available version that includes a fix for this issue. If an update is not possible, restrict access to applications using LibreDWG.

Original NVD description (English source)

A null pointer dereference issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:29. which causes a denial of service (application crash).