CVE-2019-20009: An issue was discovered in GNU LibreDWG before 0.93.

Security readout for executives and security teams

CVE-2019-20009 is a GNU LibreDWG flaw where a malicious DWG-related input can cause the software to try allocating excessive memory. The likely business impact is service disruption or processing failure where LibreDWG handles untrusted CAD files. No CVSS score or active exploitation evidence is provided in the source bundle. Exposure is most likely in systems, scripts, services, or desktop workflows that parse untrusted DWG files using GNU LibreDWG versions before 0.93. General internet exposure is not established by the provided sources. Treat this as a targeted availability risk, not a confirmed emergency. Prioritize remediation where CAD files from customers, partners, or the internet are automatically processed, especially in shared services where memory exhaustion could affect other workloads. Mitigation focus: Upgrade GNU LibreDWG to a version not affected by the pre-0.93 issue.; Apply distribution vendor updates, including relevant openSUSE security advisories where applicable.; Limit LibreDWG processing to trusted DWG files until updated..

Prepared

Jun 6, 2026, 03:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.