CVE-2020-6614

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Jan 8, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-66156.5GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c (dynapi.c is generated by gen-dynapi.pl).CVE-2020-66166.5Some Broadcom chips mishandle Bluetooth random-number generation because a low-entropy Pseudo Random Number Generator (PRNG) is used in situCVE-2020-66178.8stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_int.CVE-2020-66188.8stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__find_table.CVE-2020-66198.8stb stb_truetype.h through 1.22 has an assertion failure in stbtt__buf_seek.CVE-2020-66208.8stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_get8.CVE-2020-66218.8stb stb_truetype.h through 1.22 has a heap-based buffer over-read in ttUSHORT.CVE-2020-66228.8stb stb_truetype.h through 1.22 has a heap-based buffer over-read in stbtt__buf_peek8.CVE-2020-66238.8stb stb_truetype.h through 1.22 has an assertion failure in stbtt__cff_get_index.CVE-2020-66247.1jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c.CVE-2020-66257.1jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c.CVE-2020-66279.8The web-management application on Seagate Central NAS STCG2000300, STCG3000300, and STCG4000300 devices allows OS command injection via mv_b
CVE-2020-6614: High severity, CVSS 8.1 | Vulnix