CVE-2020-21838: GNU Libredwg

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_appinfo ../../src/decode.c:2842.

Affected products

• GNU Libredwg: version 0.10 only

Published 2021-05-17. Last modified 2026-07-09.