CVE-2020-21834

MediumCVSS 6.5

Published: 17/05/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.86%

54th percentile - higher than 54% of all known CVEs

Summary

A null pointer dereference issue was discovered in GNU LibreDWG 0.10 in the get_bmp function at dwgbmp.c:164. This flaw can cause a program crash.

Risk Assessment

An attacker could exploit this vulnerability to cause a denial of service (DoS) by providing a specially crafted DWG file, potentially disrupting applications that use LibreDWG.

Recommendation

It is recommended to update GNU LibreDWG to the latest available version that includes a fix for this issue. If an update is not possible, restrict processing of untrusted DWG files.

Original NVD description (English source)

A null pointer deference issue exists in GNU LibreDWG 0.10 via get_bmp ../../programs/dwgbmp.c:164.