CVE-2019-20909: GNU Libredwg

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_LWPOLYLINE in dwg.spec.

Affected products

• GNU Libredwg: up to and including 0.9.3

Published 2020-07-16. Last modified 2026-06-17.