Description
A security flaw has been discovered in GNU LibreDWG up to 0.14. The affected element is the function match_BLOCK_HEADER of the file dwggrep.c of the component Dwggrep Utility. Performing a manipulation results in null pointer dereference. The attack requires a local approach. The exploit has been released to the public and may be used for attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GNU | LibreDWG | 0.1, 0.2, 0.3, 0.4, 0.5, 0.6, 0.7, 0.8, 0.9, 0.10, 0.11, 0.12, 0.13, 0.14 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | libredwg | 0.14.8413-1.1 | openSUSE-SU-2026:11247-1 |
| openSUSE Leap 16.0 | libredwg | 0.14.8413-bp160.1.1 | openSUSE-SU-2026:21346-1 |
Advisories 2
- openSUSE-SU-2026:21346-1 Security update for libredwg SUSE / openSUSE Security Updates · Jul 15, 2026
- openSUSE-SU-2026:11247-1 libredwg-devel-0.14.8413-1.1 on GA media SUSE / openSUSE Security Updates · Jul 11, 2026
References
- VDB-365548 | GNU LibreDWG Dwggrep Utility dwggrep.c match_BLOCK_HEADER null pointer dereference vdb-entry technical-description
- VDB-365548 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #814273 | LibreDWG Project LibreDWG <= 0.14, main branch up to commit 6d6a339 (2026-04-10) NULL Pointer Dereference (CWE-476) third-party-advisory
- https://github.com/LibreDWG/libredwg/issues/1247 issue-tracking
- https://github.com/HackC0der/CVE-Repos/blob/main/libredwg/libredwg_6d6a339_heap_oob_write_read_2004_compressed_section.dwg exploit
- https://www.gnu.org/ product