What’s Vulnerable › Vulnerabilities

CVE-2020-23861

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-05-18 · updated 2026-06-17
• Weakness: CWE-787

Description

A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c:666:5, which causes a denial of service by submitting a dwg file.

Affected products

• GNU LibreDWG: 0.10.1

References

• https://github.com/LibreDWG/libredwg/issues/248
• https://github.com/LibreDWG/libredwg/issues/248

Get alerted when CVE-2020-23861 or the next vulnerability affects your stack