Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:libredwg:0.9.3.2564:*:*:*:*:*:*:*

part: a version: 0.9.3.2564 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductLibredwg (051d7dd1-49c1-5a26-8757-6b44ca747b34)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/libredwg/libredwg purl2cpe 2026-06-01 10:11:54.792623
pkg:gitlab/libredwg/libredwg purl2cpe 2026-06-01 10:11:54.792625
pkg:gnu/libredwg purl2cpe 2026-06-01 10:11:54.792626
pkg:rpm/opensuse/libredwg purl2cpe 2026-06-01 10:11:54.792628

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-6615 vulnerable 2026-06-08 05:26:45.539188 Details available
GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c (dynapi.c is generated by gen-dynapi.pl).
Published: 2020-01-08T20:43:04.000Z
Updated: 2024-08-04T09:11:04.663Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6614 vulnerable 2026-06-08 05:26:45.535581 Details available
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c.
Published: 2020-01-08T20:43:13.000Z
Updated: 2024-08-04T09:11:05.081Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6613 vulnerable 2026-06-08 05:26:45.534838 Details available
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c.
Published: 2020-01-08T20:43:24.000Z
Updated: 2024-08-04T09:11:04.728Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6612 vulnerable 2026-06-08 05:26:45.534314 Details available
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in decode_r2007.c.
Published: 2020-01-08T20:43:32.000Z
Updated: 2024-08-04T09:11:04.952Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6611 vulnerable 2026-06-08 05:26:45.533768 Details available
GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c.
Published: 2020-01-08T20:43:41.000Z
Updated: 2024-08-04T09:11:05.078Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6610 vulnerable 2026-06-08 05:26:45.533191 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6609 vulnerable 2026-06-08 05:26:45.532567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.