GCVE - cpe:2.3:a:gnu:libredwg:0.9.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:libredwg:0.9.2:*:*:*:*:*:*:*

part: a version: 0.9.2 update: *

Vendor	Gnu (`575dd98a-a14a-5d9e-a2eb-97d38d86fcb9`)
Product	Libredwg (`051d7dd1-49c1-5a26-8757-6b44ca747b34`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/libredwg/libredwg`	purl2cpe	2026-06-01 10:11:54.792394
`pkg:gitlab/libredwg/libredwg`	purl2cpe	2026-06-01 10:11:54.792396
`pkg:gnu/libredwg`	purl2cpe	2026-06-01 10:11:54.792398
`pkg:rpm/opensuse/libredwg`	purl2cpe	2026-06-01 10:11:54.792399

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-20015`	vulnerable	2026-06-08 05:13:30.381570	Details available An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_LWPOLYLINE_private in dwg.spec. Published: 2019-12-27T00:14:37.000Z Updated: 2024-08-05T02:32:10.478Z Open on db.gcve.eu Reference links https://github.com/LibreDWG/libredwg/issues/176 https://github.com/LibreDWG/libredwg/issues/176#issuecomment-568643028 http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-20012`	vulnerable	2026-06-08 05:13:30.379795	Details available An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_HATCH_private in dwg.spec. Published: 2019-12-27T00:15:16.000Z Updated: 2024-08-05T02:32:10.474Z Open on db.gcve.eu Reference links https://github.com/LibreDWG/libredwg/issues/176 https://github.com/LibreDWG/libredwg/issues/176#issuecomment-568643088 http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-20011`	vulnerable	2026-06-08 05:13:30.379187	Details available An issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in decode_R13_R2000 in decode.c. Published: 2019-12-27T00:15:26.000Z Updated: 2024-08-05T02:32:10.464Z Open on db.gcve.eu Reference links https://github.com/LibreDWG/libredwg/issues/176 https://github.com/LibreDWG/libredwg/issues/176#issuecomment-568643439 http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-20010`	vulnerable	2026-06-08 05:13:30.378573	Details available An issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in resolve_objectref_vector in decode.c. Published: 2019-12-27T00:14:23.000Z Updated: 2024-08-05T02:32:10.522Z Open on db.gcve.eu Reference links https://github.com/LibreDWG/libredwg/issues/176 https://github.com/LibreDWG/libredwg/issues/176#issuecomment-568643383 http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.