Description
A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c of the component Dwgbmp Utility. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. Patch name: 8f03865f37f5d4ffd616fef802acc980be54d300. Applying a patch is the recommended action to fix this issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GNU | libredwg | 0.13.4.8160 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | libredwg | 0.13.4.8200-1.1 | openSUSE-SU-2026:10879-1 |
| openSUSE Leap 16.0 | libredwg | 0.14.8413-bp160.1.1 | openSUSE-SU-2026:21346-1 |
Advisories 2
- openSUSE-SU-2026:21346-1 Security update for libredwg SUSE / openSUSE Security Updates · Jul 15, 2026
- openSUSE-SU-2026:10879-1 libredwg-devel-0.13.4.8200-1.1 on GA media SUSE / openSUSE Security Updates · May 29, 2026
References
- VDB-365678 | GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow vdb-entry technical-description
- VDB-365678 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #818197 | LibreDWG libredwg (including the dwgbmp utility) 0.13.4.8160 Buffer Overflow third-party-advisory
- https://github.com/LibreDWG/libredwg/issues/1248 issue-tracking
- https://github.com/HackC0der/CVE-Repos/blob/main/libredwg/libredwg_6d6a339_heap_oob_write_read_2004_compressed_section.dwg exploit
- https://github.com/LibreDWG/libredwg/commit/8f03865f37f5d4ffd616fef802acc980be54d300 patch
- https://www.gnu.org/ broken-link product