CVE-2019-9775

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645 (CVE-2019-9775)

criticalEPSS 3%

Description

An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function dwg_dxf_BLOCK_CONTROL at dwg.spec.

Source: CVELISTV5NVD

Metrics

Severity
critical
no public PoC known
9.1
Source: nvd-v3
86.4 %
Critical — this CVE ranks in the top fifth of all CVEs scored today (rank ≥ 80%).
3.0 %
Moderate — model estimates 1-10% exploitation likelihood.
Published
2019-03-14 07:00 UTC

Affected operating systems

  • linux

    opensuse / leap15.1

Affected products

Products and version ranges extracted from the vendor/CERT advisory. A range like „<4.14.6“ implies the update recommendation „upgrade to 4.14.6 or later“.

  • gnu

    libredwg

  • opensuse

    backports_sle

References & sources

IDCVE-2019-9775