{"id":"CVE-2020-6609","aliases":["EUVD-2020-27757","GHSA-gcf7-rjxq-p38r","openSUSE-SU-2020:0096-1","openSUSE-SU-2020:0115-1","openSUSE-SU-2024:10981-1"],"status":"published","title":"GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.","description":"GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01755,"percentile":0.78087,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125"],"published":"2020-01-08T20:44:00Z","modified":"2026-06-17T03:23:39Z","affected":[{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"libredwg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10-lp151.2.6.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"libredwg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10-bp151.2.6.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libredwg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.1-1.6"}]}],"bundled":20}],"products":[{"vendor":"gnu","product":"libredwg"},{"vendor":"opensuse","product":"backports_sle"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"https://github.com/LibreDWG/libredwg/issues/179#issue-544834443","tags":["x_refsource_MISC","x_transferred","Exploit","Patch","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00046.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00052.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-6609"},{"url":"https://github.com/advisories/GHSA-gcf7-rjxq-p38r"},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SECBSD34W2KNYYJEF4TYMEZJKZ4FZ4PV/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1160520","tags":["report"]},{"url":"https://bugzilla.suse.com/1160522","tags":["report"]},{"url":"https://bugzilla.suse.com/1160523","tags":["report"]},{"url":"https://bugzilla.suse.com/1160524","tags":["report"]},{"url":"https://bugzilla.suse.com/1160525","tags":["report"]},{"url":"https://bugzilla.suse.com/1160526","tags":["report"]},{"url":"https://bugzilla.suse.com/1160527","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-6615","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SKWWX7O3I3HH2EQGINCPXBXDFW2KZXDJ/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14524","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-20014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9770","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9773","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9774","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9775","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9776","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9778","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9779","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-6609","description":"GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.","status":"published","published":"2020-01-08T20:44:00Z","modified":"2024-08-04T09:11:04.341Z","updated_at":"2026-11-02T14:35:52.592504Z"}],"euvd":[{"id":"EUVD-2020-27757","description":"GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.","status":"published","published":"2020-01-08T20:44:00Z","modified":"2024-08-04T09:11:04Z","updated_at":"2026-11-03T03:08:02.022514Z"}],"ghsa":[{"id":"GHSA-gcf7-rjxq-p38r","title":"GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.","description":"GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.","status":"published","published":"2022-05-24T17:05:54Z","modified":"2023-01-30T05:06:32Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:47:30.961059Z"}],"nvd":[{"id":"CVE-2020-6609","description":"GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.","status":"published","published":"2020-01-08T21:15:11.193Z","modified":"2026-06-17T03:23:39.663Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:05:52.385274Z"}],"osv":[{"id":"openSUSE-SU-2020:0096-1","title":"Security update for libredwg","description":"This update for libredwg fixes the following issues:\n\nlibredwg was updated to release 0.10:\n\nAPI breaking changes:\n\n* Added a new int *isnewp argument to all dynapi utf8text\n  getters, if the returned string is freshly malloced or not.\n* removed the UNKNOWN supertype, there are only UNKNOWN_OBJ and\n  UNKNOWN_ENT left, with common_entity_data.\n* renamed BLOCK_HEADER.preview_data to preview,\n  preview_data_size to preview_size.\n* renamed SHAPE.shape_no to style_id.\n* renamed CLASS.wasazombie to is_zombie.\n\nBugfixes:\n\n* Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c.\n* Fixed encoding of added r2000 AUXHEADER address.\n* Fixed EED encoding from dwgrewrite.\n* Add several checks against\n    [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522],\n    [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524],\n    [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526],\n    [CVE-2020-6615, boo#1160527]","status":"published","published":"2020-01-22T23:11:47Z","modified":"2026-02-04T02:45:22.919312Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2020:0115-1","title":"Security update for libredwg","description":"This update for libredwg fixes the following issues:\n\nlibredwg was updated to release 0.10:\n\nAPI breaking changes:\n\n* Added a new int *isnewp argument to all dynapi utf8text\n  getters, if the returned string is freshly malloced or not.\n* removed the UNKNOWN supertype, there are only UNKNOWN_OBJ and\n  UNKNOWN_ENT left, with common_entity_data.\n* renamed BLOCK_HEADER.preview_data to preview,\n  preview_data_size to preview_size.\n* renamed SHAPE.shape_no to style_id.\n* renamed CLASS.wasazombie to is_zombie.\n\nBugfixes:\n\n* Harmonized INDXFB with INDXF, removed extra src/in_dxfb.c.\n* Fixed encoding of added r2000 AUXHEADER address.\n* Fixed EED encoding from dwgrewrite.\n* Add several checks against\n    [CVE-2020-6609, boo#1160520], [CVE-2020-6610, boo#1160522],\n    [CVE-2020-6611, boo#1160523], [CVE-2020-6612, boo#1160524],\n    [CVE-2020-6613, boo#1160525], [CVE-2020-6614, boo#1160526],\n    [CVE-2020-6615, boo#1160527]\nThis update was imported from the openSUSE:Leap:15.1:Update update project.","status":"published","published":"2020-01-28T09:13:25Z","modified":"2026-02-04T04:26:03.975463Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10981-1","title":"libredwg-devel-0.11.1-1.6 on GA media","description":"These are all security issues fixed in the libredwg-devel-0.11.1-1.6 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:24:36.531363Z","updated_at":"2026-11-02T16:58:34.894275Z"}]}}