CVE-2019-20914: GNU Libredwg

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_common_entity_handle_data in common_entity_handle_data.spec.

Affected products

• GNU Libredwg: up to and including 0.9.3

Published 2020-07-16. Last modified 2026-06-17.