CVE-2019-9775
Fixed in a distro release EPSS 3%
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function dwg_dxf_BLOCK_CONTROL at dwg.spec.
Products: gnu libredwg, opensuse backports_sle, opensuse leap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Package Hub 15 SP1 | libredwg | 0.9.3-bp151.2.3.1 |
| openSUSE Leap 15.1 | libredwg | 0.9.3-lp151.2.3.1 |
| openSUSE Tumbleweed | libredwg | 0.11.1-1.6 |