An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function bitreadB at bits.c.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-9774.json"