CVE-2020-21836: GNU Libredwg

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_preview ../../src/decode.c:3175.

Affected products

• GNU Libredwg: version 0.10 only

Published 2021-05-17. Last modified 2026-07-09.