CVE-2020-21844
HighCVSS 8.8Exploitation Probability (EPSS)
Elevated risk71th percentile - higher than 71% of all known CVEs
Summary
In GNU LibreDWG version 0.10, a vulnerability was found involving overlapping memory areas in the memcpy function. The issue occurs in the read_2004_section_header function in decode.c. It may allow remote code execution.
Risk Assessment
An attacker can remotely exploit this vulnerability to execute arbitrary code on the victim's system, potentially leading to full control over the application or system.
Recommendation
Update GNU LibreDWG to the latest available version that includes a fix for this vulnerability. If an update is not possible, restrict access to applications using this library.
Other vulnerabilities in GNU LibreDWG
See all- CVE-2026-15184Low
A vulnerability was found in GNU LibreDWG up to version 0.13.4, involving a null pointer dereference in the dwg_next_entity function of src/dwg.c when processing the next_obj argument. The attack requires local access and the exploit has been made public.
- CVE-2026-15520Medium
A vulnerability was found in GNU LibreDWG 0.13.4-154-g0b573035 in the decompress_R2004_section function of src/decode.c. Manipulation can cause a heap-based buffer overflow.
- CVE-2026-15182Medium
A vulnerability was found in GNU LibreDWG up to version 0.13.4 in the dwg_bmp function of src/dwg.c, part of the BMP Image Handler component. Manipulation leads to a heap-based buffer overflow. The attack requires local access and the exploit is publicly available.
- CVE-2026-9605High
GNU libredwg up to version 0.13.4.8160 contains a heap-based buffer overflow in the bit_read_RC function of bits.c in the Dwgbmp Utility component, which can be exploited remotely.
- CVE-2026-9530Low
In GNU LibreDWG up to 0.14, a vulnerability was found in the function read_2004_compressed_section of src/decode.c in the Dwgbmp Utility component. Manipulation can lead to out-of-bounds read. Local access is required.
- CVE-2026-9529Low
In GNU LibreDWG up to 0.14, a vulnerability was found in the function match_BLOCK_HEADER of dwggrep.c in the Dwggrep Utility component. Manipulation leads to null pointer dereference. Local access is required.
- CVE-2026-9504Low
A weakness has been identified in GNU LibreDWG up to version 0.14, affecting the bit_convert_TU function in programs/dwggrep.c of the Dwggrep Utility component. This manipulation causes an out-of-bounds read. The attack requires local access and the exploit has been made public.
- CVE-2026-9503Low
In GNU LibreDWG up to 0.14, a vulnerability was found in the function dwg_next_entity of src/decode.c in the DWG File Handler component. Manipulation leads to null pointer dereference. Local access is required.
- CVE-2026-9502Medium
A heap-based buffer overflow vulnerability was identified in GNU LibreDWG up to version 0.14 in the decompress_R2004_section function of the Dwgread Utility's src/decode.c file. The attack requires local access and the exploit is publicly available.
- CVE-2026-9501Low
In GNU LibreDWG up to 0.14, a vulnerability was found in the function decompress_R2004_section of src/decode.c in the Dwgread Utility component. Manipulation can lead to reachable assertion. Local access is required.
Original NVD description (English source)
GNU LibreDWG 0.10 is affected by: memcpy-param-overlap. The impact is: execute arbitrary code (remote). The component is: read_2004_section_header ../../src/decode.c:2580.