Skip to content
OpenAdvisories

Product · GNU

libredwg

13 known vulnerabilities.

libredwg at a glance

Last 12 months
13
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 5 10 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 8 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 3 vulnerabilities August 2026: 0 vulnerabilities September 2026: 1 vulnerability Sep October 2026: 1 vulnerability November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202610
Sep 202610
Aug 202600
Jul 202630
Jun 202600
May 202680
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

13 results · Feed

  • Medium 6.1

    GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs Decoder

    GNU LibreDWG through 0.14.8612 contains a global out-of-bounds read vulnerability in the AcDs decoder acds_private() that allows attackers to read beyond a static table via an unchecked schema property type index. Attackers can supply a crafted R2004 or R2010…

  • Low 3.3

    GNU libredwg Layer Encoding dwg.spec DWG_TABLE null pointer dereference

    A security flaw has been discovered in GNU libredwg 0.13.4. This impacts the function DWG_TABLE of the file src/dwg.spec of the component Layer Encoding. Performing a manipulation results in null pointer dereference. The attack needs to be approached locally.…

  • Medium 5.3

    GNU LibreDWG R2004 Section Decompression decode.c decompress_R2004_section heap-based overflow

    A vulnerability was determined in GNU LibreDWG 0.13.4-154-g0b573035. This impacts the function decompress_R2004_section of the file src/decode.c of the component R2004 Section Decompression. Executing a manipulation can lead to heap-based buffer overflow. The…

  • Low 3.3

    GNU LibreDWG DWG File dwg.c dwg_next_entity null pointer dereference

    A vulnerability was found in GNU LibreDWG up to 0.13.4. The impacted element is the function dwg_next_entity of the file src/dwg.c of the component DWG File Handler. Performing a manipulation of the argument next_obj results in null pointer dereference. The a…

  • Medium 5.3

    GNU LibreDWG BMP Image dwg.c dwg_bmp heap-based overflow

    A vulnerability has been found in GNU LibreDWG up to 0.13.4. The affected element is the function dwg_bmp of the file src/dwg.c of the component BMP Image Handler. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. …

  • High 7.3

    GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow

    A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c of the component Dwgbmp Utility. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. Th…

  • Low 3.3

    GNU LibreDWG Dwgbmp Utility decode.c read_2004_compressed_section out-of-bounds

    A weakness has been identified in GNU LibreDWG up to 0.14. The impacted element is the function read_2004_compressed_section of the file src/decode.c of the component Dwgbmp Utility. Executing a manipulation can lead to out-of-bounds read. The attack requires…

  • Low 3.3

    GNU LibreDWG Dwggrep Utility dwggrep.c match_BLOCK_HEADER null pointer dereference

    A security flaw has been discovered in GNU LibreDWG up to 0.14. The affected element is the function match_BLOCK_HEADER of the file dwggrep.c of the component Dwggrep Utility. Performing a manipulation results in null pointer dereference. The attack requires …

  • Low 3.3

    GNU LibreDWG Dwggrep Utility dwggrep.c bit_convert_TU out-of-bounds

    A weakness has been identified in GNU LibreDWG up to 0.14. Affected is the function bit_convert_TU of the file programs/dwggrep.c of the component Dwggrep Utility. This manipulation causes out-of-bounds read. The attack needs to be launched locally. The explo…

  • Low 3.3

    GNU LibreDWG DWG File decode.c dwg_next_entity null pointer dereference

    A security flaw has been discovered in GNU LibreDWG up to 0.14. This impacts the function dwg_next_entity of the file src/decode.c of the component DWG File Handler. The manipulation results in null pointer dereference. The attack must be initiated from a loc…

  • Medium 5.3

    GNU LibreDWG Dwgread Utility decode.c decompress_R2004_section heap-based overflow

    A vulnerability was identified in GNU LibreDWG up to 0.14. This affects the function decompress_R2004_section of the file src/decode.c of the component Dwgread Utility. The manipulation leads to heap-based buffer overflow. The attack must be carried out local…

  • Low 3.3

    GNU LibreDWG Dwgread Utility decode.c decompress_R2004_section assertion

    A vulnerability was determined in GNU LibreDWG up to 0.14. The impacted element is the function decompress_R2004_section of the file src/decode.c of the component Dwgread Utility. Executing a manipulation can lead to reachable assertion. The attack is restric…

  • Medium 5.3

    GNU LibreDWG Dwgread Utility decode.c read_2004_compressed_section heap-based overflow

    A vulnerability was found in GNU LibreDWG up to 0.14. The affected element is the function read_2004_compressed_section of the file src/decode.c of the component Dwgread Utility. Performing a manipulation results in heap-based buffer overflow. The attack is o…