Un problema è stato scoperto in GNU LibreDWG 0.7 e 0.7.1645. C’è un heap-based buffer over-read nella funzione dwg_dxf_LTYPE a dwg.spec.
http://www.securityfocus.com/bid/107447
https://github.com/LibreDWG/libredwg/issues/99
https://savannah.gnu.org/bugs/index.php?55893
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00033.html
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00045.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9778