CVE-2020-21844

HIGH

GNU LibreDWG 0.10 - Remote Code Execution via memcpy Overlap in read_2004_section_header

Title source: llm

Description

GNU LibreDWG 0.10 is affected by: memcpy-param-overlap. The impact is: execute arbitrary code (remote). The component is: read_2004_section_header ../../src/decode.c:2580.

References (2)

Core 2

Core References

Not Applicable x_refsource_misc

http://gnu.com

Exploit, Issue Tracking, Patch, Third Party Advisory x_refsource_misc

https://github.com/LibreDWG/libredwg/issues/188#issuecomment-574493607

Scores

CVSS v3 8.8

EPSS 0.0059

EPSS Percentile 69.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

Status published

Products (1)

gnu/libredwg 0.10

Published May 17, 2021

Tracked Since Feb 18, 2026