CVE-2020-21838

Name of the Vulnerable Software and Affected Versions: GNU LibreDWG version 0.10

Description: A heap-based buffer overflow issue exists in the read 2004 section appinfo function, located in the decode.c file. This issue can be exploited via the read 2004 section appinfo function.

Recommendations: For GNU LibreDWG version 0.10, consider applying a patch or fix to address the heap-based buffer overflow issue in the read 2004 section appinfo function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.