CVE-2019-20012: An issue was discovered in GNU LibreDWG 0.92.

Security readout for executives and security teams

CVE-2019-20012 affects GNU LibreDWG 0.92. A specially crafted DWG-related input can make the parser attempt an excessive memory allocation. The documented business concern is availability: affected systems processing untrusted DWG files could crash, stall, or consume resources. The provided sources do not establish data theft or code execution. Exposure is most likely where GNU LibreDWG 0.92, or packages built from it, process untrusted DWG files in desktop tools, conversion services, CI pipelines, or automated document workflows. The source bundle does not identify broader affected versions beyond 0.92. Prioritize remediation where LibreDWG processes external or customer-supplied CAD files. For internal-only, rarely used installations, handle through normal vulnerability maintenance. The available evidence supports availability risk, not confirmed compromise activity. Mitigation focus: Identify systems using GNU LibreDWG 0.92 or downstream distro packages.; Apply vendor or distribution security updates where available.; Review openSUSE advisories if using affected SUSE or openSUSE packages..

Prepared

Jun 6, 2026, 03:31 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.