Gnu Libredwg vulnerabilities
101 vulnerabilities
Known vulnerabilities in Gnu Libredwg, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-111167gnulibredwg
EPSS score0.13%
GNU LibreDWG through 0.14.8612 contains a global out-of-bounds read vulnerability in the AcDs decoder acds_private() that allows attackers to read beyond a static table via an unchecked schema property type index. Attackers can supply a crafted R2004 or R2010+ DWG file with a large 'schdat' property type value to crash dwgread, dwg2dxf, or any application using LibreDWG.CVE-2018-14443gnulibredwgEPSS score1.12%
get_first_owned_object in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service (SEGV).CVE-2018-14524gnulibredwgEPSS score1.06%
dwg_decode_eed in decode.c in GNU LibreDWG before 0.6 leads to a double free (in dwg_free_eed in free.c) because it does not properly manage the obj->eed value after a free occurs.CVE-2018-14471gnulibredwgEPSS score1.35%
dwg_obj_block_control_get_block_headers in dwg_api.c in GNU LibreDWG 0.5.1048 allows remote attackers to cause a denial of service (NULL pointer dereference and SEGV) via a crafted dwg file.CVE-2021-42585gnulibredwgEPSS score1.02%
A heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.CVE-2021-42586gnulibredwgEPSS score1.03%
A heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.CVE-2021-36080gnulibredwgEPSS score1.33%
GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from dwg_encode_MTEXT and dwg_encode_add_object).CVE-2021-39527gnulibredwgEPSS score1.06%
An issue was discovered in libredwg through v0.10.1.3751. appinfo_private() in decode.c has a heap-based buffer overflow.CVE-2021-39530gnulibredwgEPSS score1.08%
An issue was discovered in libredwg through v0.10.1.3751. bit_wcs2nlen() in bits.c has a heap-based buffer overflow.CVE-2021-39525gnulibredwgEPSS score1.06%
An issue was discovered in libredwg through v0.10.1.3751. bit_read_fixed() in bits.c has a heap-based buffer overflow.CVE-2021-39521gnulibredwgEPSS score0.87%
An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function bit_read_BB() located in bits.c. It allows an attacker to cause Denial of Service.CVE-2021-39522gnulibredwgEPSS score1.08%
An issue was discovered in libredwg through v0.10.1.3751. bit_wcs2len() in bits.c has a heap-based buffer overflow.CVE-2021-39523gnulibredwgEPSS score0.86%
An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function check_POLYLINE_handles() located in decode.c. It allows an attacker to cause Denial of Service.CVE-2021-39528gnulibredwgEPSS score1.08%
An issue was discovered in libredwg through v0.10.1.3751. dwg_free_MATERIAL_private() in dwg.spec has a double free.CVE-2021-45950gnulibredwgEPSS score0.89%
LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object).CVE-2021-28236gnulibredwgEPSS score1.24%
LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c.CVE-2021-28237gnulibredwg+3EPSS score1.41%
LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.CVE-2025-61154gnulibredwgEPSS score0.23%
Heap buffer overflow vulnerability in LibreDWG versions v0.13.3.7571 up to v0.13.3.7835 allows a crafted DWG file to cause a Denial of Service (DoS) via the function decompress_R2004_section at decode.c.CVE-2020-21840gnulibredwgEPSS score1.07%
A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_search_sentinel ../../src/bits.c:1985.CVE-2020-21834gnulibredwgEPSS score0.86%
A null pointer deference issue exists in GNU LibreDWG 0.10 via get_bmp ../../programs/dwgbmp.c:164.