CVE-2020-21840: GNU Libredwg

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_search_sentinel ../../src/bits.c:1985.

Affected products

• GNU Libredwg: version 0.10 only

Published 2021-05-17. Last modified 2026-07-09.