Skip to content
OpenAdvisories

Vendor

LibreDWG

3 known vulnerabilities.

Products

libredwg 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.5
    CVE-2026-62250

    LibreDWG: unbounded allocation in pre-R13 DWG entity decoding

    LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make `decode_preR13_entities()` in `src/decode.c` enter a nonterminating loop that allocates a new object each iteration. `decode_preR13` in `src/decode_r1…

    LibreDWG libredwg
  • Medium 5.5
    CVE-2026-62254

    LibreDWG: excessive class-decoding reallocation in R13-R2000 DWG parsing

    LibreDWG is a free C library to read and write DWG files. Prior to 0.14, a specially crafted R13-R2000 DWG can trigger algorithmic resource exhaustion in `decode_R13_R2000` in `src/decode.c`. The class-decoding loop performs `realloc` on every iteration witho…

    LibreDWG libredwg