CVE-2019-20011: An issue was discovered in GNU LibreDWG 0.92.

Security readout for executives and security teams

CVE-2019-20011 is a memory-read flaw in GNU LibreDWG 0.92’s DWG decoding code. If the software processes a crafted DWG file, it may read beyond heap memory. Public sources do not provide a CVSS score, confirmed real-world exploitation, or detailed impact statement, so urgency depends on whether the organization processes untrusted DWG files. Exposure is most likely on systems using GNU LibreDWG 0.92, or distribution packages based on it, to parse DWG files. Risk is higher where DWG files are accepted from customers, partners, email, file shares, or automated conversion pipelines. Treat this as a targeted remediation item, not an emergency, unless DWG files from untrusted parties are processed at scale. Patch affected packages and reduce untrusted file parsing exposure, but current sources do not support active-exploitation claims. Mitigation focus: Update GNU LibreDWG or distribution packages using vendor security advisories.; For openSUSE systems, apply the January 2020 security updates referenced by SUSE.; Restrict processing of DWG files from untrusted or unauthenticated sources..

Prepared

Jun 6, 2026, 03:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.