Description
A security flaw has been discovered in GNU LibreDWG up to 0.14. This impacts the function dwg_next_entity of the file src/decode.c of the component DWG File Handler. The manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The patch is identified as 8f03865f37f5d4ffd616fef802acc980be54d300. Upgrading the affected component is advised.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GNU | LibreDWG | 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.7, 0.8, 0.9, 0.10, 0.11, 0.12, 0.13, 0.14 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | libredwg | 0.13.4.8200-1.1 | openSUSE-SU-2026:10879-1 |
| openSUSE Leap 16.0 | libredwg | 0.14.8413-bp160.1.1 | openSUSE-SU-2026:21346-1 |
Advisories 2
- openSUSE-SU-2026:21346-1 Security update for libredwg SUSE / openSUSE Security Updates · Jul 15, 2026
- openSUSE-SU-2026:10879-1 libredwg-devel-0.13.4.8200-1.1 on GA media SUSE / openSUSE Security Updates · May 29, 2026
References
- VDB-365485 | GNU LibreDWG DWG File decode.c dwg_next_entity null pointer dereference vdb-entry technical-description
- VDB-365485 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #814260 | LibreDWG Project LibreDWG <= 0.14, main branch up to commit 6d6a339 (2026-04-10) NULL Pointer Dereference (CWE-476) third-party-advisory
- https://github.com/LibreDWG/libredwg/issues/1245 issue-tracking
- https://github.com/HackC0der/CVE-Repos/blob/main/libredwg/libredwg_6d6a339_heap_oob_write_read_2004_compressed_section.dwg exploit
- https://github.com/LibreDWG/libredwg/commit/8f03865f37f5d4ffd616fef802acc980be54d300 patch
- https://www.gnu.org/ product