CVE-2020-21835

MediumCVSS 6.5

Published: 17/05/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.86%

54th percentile - higher than 54% of all known CVEs

Summary

A null pointer dereference issue exists in GNU LibreDWG version 0.10 in the read_2004_compressed_section function in decode.c. The bug can cause a program crash when processing specially crafted DWG files.

Risk Assessment

An attacker can exploit this vulnerability to cause a denial of service (DoS) by providing a malicious DWG file, potentially disrupting applications that use the LibreDWG library.

Recommendation

It is recommended to update GNU LibreDWG to the latest available version that includes a fix for this issue. If an update is not possible, limit processing of DWG files from untrusted sources.

Original NVD description (English source)

A null pointer deference issue exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2337.