LibreDWG vulnerabilities

2 known vulnerabilities in LibreDWG from GNU. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  libredwg: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2026-9605May 27, 2026GNU

  A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c of the component Dwgbmp Utility. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The

• 7.5 High severity

  Libredwg: Reachable Assertion

  CVE-2022-33024Jun 23, 2022GNUEPSS 1.08%

  There is an Assertion `int decode_preR13_entities(BITCODE_RL, BITCODE_RL, unsigned int, BITCODE_RL, BITCODE_RL, Bit_Chain *, Dwg_Data *' failed at dwg2dxf: decode.c:5801 in libredwg v0.12.4.4608.