CVE-2020-21839

MediumCVSS 6.5

Published: 17/05/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.91%

56th percentile - higher than 56% of all known CVEs

Summary

A memory leak vulnerability was discovered in GNU LibreDWG version 0.10 in the dwg_decode_eed function at decode.c:3638. Crafted input can cause a memory leak, potentially leading to resource exhaustion.

Risk Assessment

The risk involves potential memory exhaustion by an attacker, which could result in denial of service (DoS) in applications using this library to process DWG files.

Recommendation

It is recommended to update GNU LibreDWG to the latest available version that includes a fix for this memory leak. Also avoid processing untrusted DWG files without proper validation.

Original NVD description (English source)

An issue was discovered in GNU LibreDWG 0.10. Crafted input will lead to an memory leak in dwg_decode_eed ../../src/decode.c:3638.