{"id":"CVE-2019-20911","details":"An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bit_calc_CRC in bits.c, related to a for loop.","modified":"2026-04-11T09:40:06.782757Z","published":"2020-07-16T18:15:13.300Z","references":[{"type":"FIX","url":"https://github.com/LibreDWG/libredwg/commit/c6f6668b82bfe595899cc820279ac37bb9ef16f5"},{"type":"EVIDENCE","url":"https://github.com/LibreDWG/libredwg/issues/178"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/libredwg/libredwg","events":[{"introduced":"0"},{"last_affected":"ece161fd5e396fdb4094bdba027c5ea8476f73af"},{"fixed":"c6f6668b82bfe595899cc820279ac37bb9ef16f5"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"0.9.3"}]}}],"versions":["0.3","0.4-dev","0.4.900","0.4.924","0.4.938","0.5","0.6","0.6.1","0.6.2","0.7","0.8","0.9","0.9.1","0.9.2","0.9.3"],"database_specific":{"vanir_signatures":[{"deprecated":false,"digest":{"length":373,"function_hash":"106809018278607634862018976279590193353"},"id":"CVE-2019-20911-0f6c01e6","target":{"function":"SINCE","file":"src/decode.c"},"source":"https://github.com/libredwg/libredwg/commit/c6f6668b82bfe595899cc820279ac37bb9ef16f5","signature_version":"v1","signature_type":"Function"},{"deprecated":false,"digest":{"length":6211,"function_hash":"223328293859909205355334879786276273109"},"id":"CVE-2019-20911-29aff23f","target":{"function":"dwg_free_object","file":"src/free.c"},"source":"https://github.com/libredwg/libredwg/commit/c6f6668b82bfe595899cc820279ac37bb9ef16f5","signature_version":"v1","signature_type":"Function"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["220482688184539288151668780977417630684","176291465121732679024776710052933671243","28265445555738916256496277091474380320","269922082506870699698860466366408064412","70518948330967747255998879452416188236","204551529020203106143026653382353860502","141718847684466907765301194946634766478","301107948025968594727770903237543703243","63304491552602468583569821278309865871","28475039318222455503554933030044555573","252147038639091649093710190579567936624","291165943322470885970214030518756916342","145994521436360424011500730565315887428","48062048948458017365619788757291382527","302056257052652407517977086870902379694","116755426054344277176122865654908086479","72750449423761956206452217789436710272","282781283381587350522874062824400502096","254961367150423228248286960488188401865","154042521919402470047966578037854896245","222597149263209854922439472779966382935"]},"id":"CVE-2019-20911-86ac068f","target":{"file":"src/encode.c"},"source":"https://github.com/libredwg/libredwg/commit/c6f6668b82bfe595899cc820279ac37bb9ef16f5","signature_version":"v1","signature_type":"Line"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["251945387157299814547762952800876995102","93581200417844485077373356620185031063","37555813835132691112491942210698180267","193320986567287437755925945707435550550","273828777948888185137411119496114567057","246452774591704277598293930436979147743","168597697874739642460536768620220372657","197864532149369497949654330544328589588","84445630395092935644368329515108907599","188440445384832426897319115940294686399","17307560220112481785697426550881820338","301417079320282639340357009204995173931","145280584675989180470895210873803196552","283811165617485652484309571988932239052","198233087132786898832861343647847233051","286478346189911090778001200762140012874","56011968016404153401652190896325206654","318879269177327145735150286811268133152","182440901874691292798520880218761002313","38349442615888839137643819224546205712","273941980587333347991943808968387187765","305976884909729621656902698082004886414","70449064798473707391074867336552187104","123802786952589248223481040153861261768","298894934157052213612224150298209074873","94873465058896131759287334003390812874","62049135252840058307762274530914361157","94000353855688777043592083077833686464","292704547888685729960342185816345802198","279391504608406314567747093892020661082","109114155144191265725641665374487548623","12517666710323876892252953300059093436","149151314029909108591494834805225310887","198233087132786898832861343647847233051","286478346189911090778001200762140012874","56011968016404153401652190896325206654","318879269177327145735150286811268133152","53089762292085380839095044999103810658","2530810005093979708064517896531828815","245249275406687821451223474971662605024","132727017412466996092131682537912103997","195573514844400697207701976965973931523","151689535067839779520366405950928776262","211165674058178084528335286766050964486","139048551528369068354577630499435885891","26179880442386548898934032548038240336","190787613597004363654162330589952767415","119792552814264927210388910304600747553","218398865644840824509175012998130221248","131306161937458396461989660485311259301","238658761316129031293900678625924741795","202744795849783270345908546791863480790","234320230376668641898908157868626590910","40227651793905334744321378599672493840","176791526540204279966540132430609049712","12237650208199524578241644989905295273","10272913059096208366703190602011868508","324152984837497269701765752225228471812","254382989951952730123586860263205205825","118090925541747642262151420054110318695","101036408906899947247964260014618258753","154890782223607549258489081750208416255","74175533466200943479880118819042960119","83294247517829902845641123941790414803","336018580404958529745414763185747900376","57411127081111078570331228134434231455"]},"id":"CVE-2019-20911-8b78f610","target":{"file":"src/decode.c"},"source":"https://github.com/libredwg/libredwg/commit/c6f6668b82bfe595899cc820279ac37bb9ef16f5","signature_version":"v1","signature_type":"Line"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["56483437403754171333812153352951827928","23233666031351432207582240898235234845","179806719182584965373296362965082129723","25894154770450131496372023062859516645"]},"id":"CVE-2019-20911-8cffabb2","target":{"file":"include/dwg.h"},"source":"https://github.com/libredwg/libredwg/commit/c6f6668b82bfe595899cc820279ac37bb9ef16f5","signature_version":"v1","signature_type":"Line"},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["52761424869236557255973423742553838807","215600856078517993831395409639670622266","279428429463677663877077980714377629012","163253528822688241089948001078832280362","191409458076949165257536681933106223358","94764767950236120451169137832093576402","109035891072297547718982542965265519417","2002229941546253297293605358431748851","330062216427647182314129415389396061391","74719427043901116100136941656841797176","44906017554478652816240468226334415703","327906263899587455095790763948211430727","194057987507304434636550632395525701131","330226915239779506206840160975987112409","263608496542222693478658248877952770163","39446798752798468856905359448372453935","64527304045851204074442648699019278810","176424669703960161692652174090451720639","182980960745675938183147126953329451958","214505408223036214647981662379023739169","41975805946090958893196185287589226046","171195695625596686974932187324041042739","282526055411974480135850591793333903484","145017905036933888043491582848366795297","12157722962590166251563077481884734057","18043260103506912154110735615951601647","228614567664875911155877869276624418973","130714247278227535819193381783944982178","289310905385186565665812354282758245738","187762349123274140254230011097804438464","227266381049288221803751945135001793744","289713837950650898335487510528745939417","239176322299376778745494607232821653902","183802465226634481697692664871138290051","55333520952329110204680013458435809289","73350023544271900779672539991641934650"]},"id":"CVE-2019-20911-c37b3878","target":{"file":"src/free.c"},"source":"https://github.com/libredwg/libredwg/commit/c6f6668b82bfe595899cc820279ac37bb9ef16f5","signature_version":"v1","signature_type":"Line"},{"deprecated":false,"digest":{"length":10090,"function_hash":"8481528165707574390001825662864358417"},"id":"CVE-2019-20911-ec63ebd0","target":{"function":"dwg_encode_add_object","file":"src/encode.c"},"source":"https://github.com/libredwg/libredwg/commit/c6f6668b82bfe595899cc820279ac37bb9ef16f5","signature_version":"v1","signature_type":"Function"}],"vanir_signatures_modified":"2026-04-11T09:40:06Z","source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-20911.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}