Libredwg (Gnu) - vulnerabilities (CVEs)

101 CVEs, 1 in the last 30 days, 841 known versions, newest CVE from 2026-10-15. Vendor: Gnu.

CVEs of Libredwg

CVE-2026-111167 - CVSS 6.9 (medium), 2026-10-15: GNU LibreDWG through 0.14.8612 contains a global out-of-bounds read vulnerability in the AcDs decoder acds_private() that allows attackers to read beyond a…
CVE-2026-90622 - CVSS 4.8 (medium), 2026-09-14: A security flaw has been discovered in GNU libredwg 0.13.4. This impacts the function DWG_TABLE of the file src/dwg.spec of the component Layer Encoding.…
CVE-2026-15520 - CVSS 5.3 (medium), 2026-07-13: A vulnerability was determined in GNU LibreDWG 0.13.4-154-g0b573035. This impacts the function decompress_R2004_section of the file src/decode.c of the…
CVE-2026-15184 - CVSS 4.8 (medium), 2026-07-09: A vulnerability was found in GNU LibreDWG up to 0.13.4. The impacted element is the function dwg_next_entity of the file src/dwg.c of the component DWG File…
CVE-2026-15182 - CVSS 5.3 (medium), 2026-07-09: A vulnerability has been found in GNU LibreDWG up to 0.13.4. The affected element is the function dwg_bmp of the file src/dwg.c of the component BMP Image…
CVE-2026-9605 - CVSS 7.3 (high), 2026-05-27: A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c of the component Dwgbmp Utility. This…
CVE-2026-9530 - CVSS 4.8 (medium), 2026-05-26: A weakness has been identified in GNU LibreDWG up to 0.14. The impacted element is the function read_2004_compressed_section of the file src/decode.c of the…
CVE-2026-9529 - CVSS 4.8 (medium), 2026-05-26: A security flaw has been discovered in GNU LibreDWG up to 0.14. The affected element is the function match_BLOCK_HEADER of the file dwggrep.c of the component…
CVE-2026-9504 - CVSS 4.8 (medium), 2026-05-25: A weakness has been identified in GNU LibreDWG up to 0.14. Affected is the function bit_convert_TU of the file programs/dwggrep.c of the component Dwggrep…
CVE-2026-9503 - CVSS 4.8 (medium), 2026-05-25: A security flaw has been discovered in GNU LibreDWG up to 0.14. This impacts the function dwg_next_entity of the file src/decode.c of the component DWG File…
CVE-2026-9502 - CVSS 5.3 (medium), 2026-05-25: A vulnerability was identified in GNU LibreDWG up to 0.14. This affects the function decompress_R2004_section of the file src/decode.c of the component…
CVE-2026-9500 - CVSS 5.3 (medium), 2026-05-25: A vulnerability was found in GNU LibreDWG up to 0.14. The affected element is the function read_2004_compressed_section of the file src/decode.c of the…
CVE-2026-9501 - CVSS 4.8 (medium), 2026-05-25: A vulnerability was determined in GNU LibreDWG up to 0.14. The impacted element is the function decompress_R2004_section of the file src/decode.c of the…
CVE-2025-61154 - CVSS 6.5 (medium), 2026-03-12: Heap buffer overflow vulnerability in LibreDWG versions v0.13.3.7571 up to v0.13.3.7835 allows a crafted DWG file to cause a Denial of Service (DoS) via the…
CVE-2023-26157 - CVSS 7.5 (high), 2024-01-02: Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_pages in…
CVE-2023-36272 - CVSS 8.8 (high), 2023-06-23: LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_utf8_to_TU at bits.c.
CVE-2023-36271 - CVSS 8.8 (high), 2023-06-23: LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_wcs2nlen at bits.c.
CVE-2023-36274 - CVSS 8.8 (high), 2023-06-23: LibreDWG v0.11 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_write_TF at bits.c.
CVE-2023-36273 - CVSS 8.8 (high), 2023-06-23: LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c.
CVE-2023-25222 - CVSS 8.8 (high), 2023-03-01: A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bit_read_RC function at bits.c.
CVE-2022-45332 - CVSS 7.8 (high), 2022-11-30: LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function decode_preR13_section_hdr at decode_r11.c.
CVE-2022-35164 - CVSS 9.8 (critical), 2022-08-18: LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain.
CVE-2022-33027 - CVSS 7.8 (high), 2022-06-23: LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function dwg_add_handleref at dwg.c.
CVE-2022-33033 - CVSS 7.8 (high), 2022-06-23: LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwg_read_file at dwg.c.
CVE-2022-33026 - CVSS 7.8 (high), 2022-06-23: LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c.
CVE-2022-33032 - CVSS 7.8 (high), 2022-06-23: LibreDWG v0.12.4.4608 was discovered to contain a heap-buffer-overflow via the function decode_preR13_section_hdr at decode_r11.c.
CVE-2022-33025 - CVSS 7.8 (high), 2022-06-23: LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function decode_preR13_section at decode_r11.c.
CVE-2022-33028 - CVSS 7.8 (high), 2022-06-23: LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function dwg_add_object at decode.c.
CVE-2022-33034 - CVSS 7.8 (high), 2022-06-23: LibreDWG v0.12.4.4608 was discovered to contain a stack overflow via the function copy_bytes at decode_r2007.c.
CVE-2022-33024 - CVSS 7.5 (high), 2022-06-23: There is an Assertion `int decode_preR13_entities(BITCODE_RL, BITCODE_RL, unsigned int, BITCODE_RL, BITCODE_RL, Bit_Chain *, Dwg_Data *' failed at dwg2dxf:…
CVE-2021-42586 - CVSS 8.8 (high), 2022-05-23: A heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.
CVE-2021-42585 - CVSS 8.8 (high), 2022-05-23: A heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.
CVE-2021-45950 - CVSS 6.5 (medium), 2022-01-01: LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object).
CVE-2021-28237 - CVSS 9.8 (critical), 2021-12-02: LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.
CVE-2021-28236 - CVSS 7.5 (high), 2021-12-02: LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c.
CVE-2021-39528 - CVSS 8.8 (high), 2021-09-20: An issue was discovered in libredwg through v0.10.1.3751. dwg_free_MATERIAL_private() in dwg.spec has a double free.
CVE-2021-39527 - CVSS 8.8 (high), 2021-09-20: An issue was discovered in libredwg through v0.10.1.3751. appinfo_private() in decode.c has a heap-based buffer overflow.
CVE-2021-39530 - CVSS 8.8 (high), 2021-09-20: An issue was discovered in libredwg through v0.10.1.3751. bit_wcs2nlen() in bits.c has a heap-based buffer overflow.
CVE-2021-39523 - CVSS 6.5 (medium), 2021-09-20: An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function check_POLYLINE_handles() located in decode.c. It…
CVE-2021-39522 - CVSS 8.8 (high), 2021-09-20: An issue was discovered in libredwg through v0.10.1.3751. bit_wcs2len() in bits.c has a heap-based buffer overflow.
CVE-2021-39521 - CVSS 6.5 (medium), 2021-09-20: An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function bit_read_BB() located in bits.c. It allows an…
CVE-2021-39525 - CVSS 8.8 (high), 2021-09-20: An issue was discovered in libredwg through v0.10.1.3751. bit_read_fixed() in bits.c has a heap-based buffer overflow.
CVE-2021-36080 - CVSS 8.8 (high), 2021-07-01: GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from dwg_encode_MTEXT and dwg_encode_add_object).
CVE-2020-23861 - CVSS 5.5 (medium), 2021-05-18: A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c:666:5, which…
CVE-2020-21842 - CVSS 8.8 (high), 2021-05-17: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_revhistory ../../src/decode.c:3051.
CVE-2020-21831 - CVSS 8.8 (high), 2021-05-17: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_handles ../../src/decode.c:2637.
CVE-2020-21844 - CVSS 8.8 (high), 2021-05-17: GNU LibreDWG 0.10 is affected by: memcpy-param-overlap. The impact is: execute arbitrary code (remote). The component is: read_2004_section_header…
CVE-2020-21843 - CVSS 8.8 (high), 2021-05-17: A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_RC ../../src/bits.c:318.
CVE-2020-21833 - CVSS 8.8 (high), 2021-05-17: A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_classes ../../src/decode.c:2440.
CVE-2020-21836 - CVSS 8.8 (high), 2021-05-17: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_preview ../../src/decode.c:3175.
CVE-2020-21840 - CVSS 8.8 (high), 2021-05-17: A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_search_sentinel ../../src/bits.c:1985.
CVE-2020-21832 - CVSS 8.8 (high), 2021-05-17: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2417.
CVE-2020-21835 - CVSS 6.5 (medium), 2021-05-17: A null pointer deference issue exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2337.
CVE-2020-21839 - CVSS 6.5 (medium), 2021-05-17: An issue was discovered in GNU LibreDWG 0.10. Crafted input will lead to an memory leak in dwg_decode_eed ../../src/decode.c:3638.
CVE-2020-21830 - CVSS 8.8 (high), 2021-05-17: A heap based buffer overflow vulneraibility exists in GNU LibreDWG 0.10 via bit_calc_CRC ../../src/bits.c:2213.
CVE-2020-21834 - CVSS 6.5 (medium), 2021-05-17: A null pointer deference issue exists in GNU LibreDWG 0.10 via get_bmp ../../programs/dwgbmp.c:164.
CVE-2020-21838 - CVSS 8.8 (high), 2021-05-17: A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_appinfo ../../src/decode.c:2842.
CVE-2020-21841 - CVSS 8.8 (high), 2021-05-17: A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_B ../../src/bits.c:135.
CVE-2020-21827 - CVSS 7.8 (high), 2021-05-17: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2379.
CVE-2020-21816 - CVSS 8.8 (high), 2021-05-17: A heab based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:46.
CVE-2020-21819 - CVSS 8.8 (high), 2021-05-17: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641via htmlescape ../../programs/escape.c:51.
CVE-2020-21815 - CVSS 6.5 (medium), 2021-05-17: A null pointer deference issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114, which causes a denial of service (application…
CVE-2020-21818 - CVSS 8.8 (high), 2021-05-17: A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:48.
CVE-2020-21814 - CVSS 8.8 (high), 2021-05-17: A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlwescape ../../programs/escape.c:97.
CVE-2020-21817 - CVSS 6.5 (medium), 2021-05-17: A null pointer dereference issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:29. which causes a denial of service (application…
CVE-2020-21813 - CVSS 7.8 (high), 2021-05-17: A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114.
CVE-2020-15807 - CVSS 6.5 (medium), 2020-07-17: GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files.
CVE-2019-20911 - CVSS 6.5 (medium), 2020-07-16: An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bit_calc_CRC in bits.c, related to a for loop.
CVE-2019-20914 - CVSS 9.8 (critical), 2020-07-16: An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_common_entity_handle_data in…
CVE-2019-20910 - CVSS 8.1 (high), 2020-07-16: An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in decode_R13_R2000 in decode.c, a different…
CVE-2019-20913 - CVSS 8.1 (high), 2020-07-16: An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in dwg_encode_entity in common_entity_data.spec.
CVE-2019-20912 - CVSS 8.8 (high), 2020-07-16: An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a stack overflow in bits.c, possibly related to bit_read_TF.
CVE-2019-20915 - CVSS 8.1 (high), 2020-07-16: An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in bit_write_TF in bits.c.
CVE-2019-20909 - CVSS 7.5 (high), 2020-07-16: An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_LWPOLYLINE in dwg.spec.
CVE-2020-6615 - CVSS 6.5 (medium), 2020-01-08: GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c (dynapi.c is generated by gen-dynapi.pl).
CVE-2020-6611 - CVSS 6.5 (medium), 2020-01-08: GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c.
CVE-2020-6614 - CVSS 8.1 (high), 2020-01-08: GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfr_read in decode.c.
CVE-2020-6610 - CVSS 6.5 (medium), 2020-01-08: GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in decode_r2007.c.
CVE-2020-6613 - CVSS 8.1 (high), 2020-01-08: GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bit_search_sentinel in bits.c.
CVE-2020-6609 - CVSS 8.8 (high), 2020-01-08: GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in read_pages_map in decode_r2007.c.
CVE-2020-6612 - CVSS 8.1 (high), 2020-01-08: GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copy_compressed_bytes in decode_r2007.c.
CVE-2019-20009 - CVSS 6.5 (medium), 2019-12-27: An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_SPLINE_private in…
CVE-2019-20012 - CVSS 6.5 (medium), 2019-12-27: An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_HATCH_private in dwg.spec.
CVE-2019-20015 - CVSS 6.5 (medium), 2019-12-27: An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwg_decode_LWPOLYLINE_private in dwg.spec.
CVE-2019-20011 - CVSS 8.8 (high), 2019-12-27: An issue was discovered in GNU LibreDWG 0.92. There is a heap-based buffer over-read in decode_R13_R2000 in decode.c.
CVE-2019-20014 - CVSS 8.8 (high), 2019-12-27: An issue was discovered in GNU LibreDWG before 0.93. There is a double-free in dwg_free in free.c.
CVE-2019-20010 - CVSS 8.8 (high), 2019-12-27: An issue was discovered in GNU LibreDWG 0.92. There is a use-after-free in resolve_objectref_vector in decode.c.
CVE-2019-20013 - CVSS 6.5 (medium), 2019-12-27: An issue was discovered in GNU LibreDWG before 0.93. Crafted input will lead to an attempted excessive memory allocation in decode_3dsolid in dwg.spec.
CVE-2019-9777 - CVSS 7.5 (high), 2019-03-14: An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read in the function dxf_header_write at header_variables_dxf.spec.
CVE-2019-9779 - CVSS 7.5 (high), 2019-03-14: An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LTYPE at dwg.spec (earlier than…
CVE-2019-9778 - CVSS 7.5 (high), 2019-03-14: An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer over-read in the function dwg_dxf_LTYPE at dwg.spec.
CVE-2019-9770 - CVSS 7.5 (high), 2019-03-14: An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwg_decode_eed_data at decode.c for the y…
CVE-2019-9773 - CVSS 7.5 (high), 2019-03-14: An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a heap-based buffer overflow in the function dwg_decode_eed_data at decode.c for the z…
CVE-2019-9776 - CVSS 7.5 (high), 2019-03-14: An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LTYPE at dwg.spec (later than…
CVE-2019-9772 - CVSS 7.5 (high), 2019-03-14: An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function dwg_dxf_LEADER at dwg.spec.
CVE-2019-9775 - CVSS 9.1 (critical), 2019-03-14: An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function dwg_dxf_BLOCK_CONTROL at dwg.spec.
CVE-2019-9771 - CVSS 7.5 (high), 2019-03-14: An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is a NULL pointer dereference in the function bit_convert_TU at bits.c.
CVE-2019-9774 - CVSS 9.1 (critical), 2019-03-14: An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function bit_read_B at bits.c.
CVE-2018-14524 - CVSS 6.5 (medium), 2018-07-23: dwg_decode_eed in decode.c in GNU LibreDWG before 0.6 leads to a double free (in dwg_free_eed in free.c) because it does not properly manage the obj->eed…
CVE-2018-14471 - CVSS 6.5 (medium), 2018-07-20: dwg_obj_block_control_get_block_headers in dwg_api.c in GNU LibreDWG 0.5.1048 allows remote attackers to cause a denial of service (NULL pointer dereference…