{"id":"CVE-2019-20913","details":"An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in dwg_encode_entity in common_entity_data.spec.","modified":"2026-08-07T15:18:59.632082Z","published":"2020-07-16T18:15:13.503Z","references":[{"type":"FIX","url":"https://github.com/LibreDWG/libredwg/commit/3f503dd294efc63a59608d8a16058c41d44ba13a"},{"type":"EVIDENCE","url":"https://github.com/LibreDWG/libredwg/issues/178"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/libredwg/libredwg","events":[{"introduced":"0"},{"last_affected":"ece161fd5e396fdb4094bdba027c5ea8476f73af"},{"fixed":"3f503dd294efc63a59608d8a16058c41d44ba13a"}],"database_specific":{"cpe":"cpe:2.3:a:gnu:libredwg:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"0.9.3"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["0.9.3","0.9.2","0.9.1","0.9","0.8","0.7","0.6.2","0.6.1","0.6","0.5","0.4.938","0.4.924","0.4.900","0.4-dev","0.3"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-20913.json","vanir_signatures_modified":"2026-08-07T15:18:59Z","vanir_signatures":[{"digest":{"line_hashes":["213830826583996689317402313247636871493","298180385519731208510418832512441301787","7303241884940340386907104689857094217","320578161566026926538531320737336809925","244310063297749902037832346621059482668"],"threshold":0.9},"id":"CVE-2019-20913-4d86c6ce","signature_type":"Line","signature_version":"v1","source":"https://github.com/libredwg/libredwg/commit/3f503dd294efc63a59608d8a16058c41d44ba13a","target":{"file":"src/dec_macros.h"},"deprecated":false}]}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H"}]}