CVE-2020-6609

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Jan 8, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-66106.5GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in decode_r2007.c.CVE-2020-66116.5GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c.CVE-2020-66128.1GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in decode_r2007.c.CVE-2020-66138.1GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c.CVE-2020-66148.1GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c.CVE-2020-66156.5GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c (dynapi.c is generated by gen-dynapi.pl).CVE-2020-66166.5Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (PRNG) is used in situCVE-2020-66178.8stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int.CVE-2020-66188.8stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table.CVE-2020-66198.8stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek.CVE-2020-66208.8stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8.CVE-2020-66218.8stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT.
CVE-2020-6609: High severity, CVSS 8.8 | Vulnix