Vulnerabilities

TI-2025-37940 CVE-2025-61154 · GHSA-37rg-q294-rgvc

Heap buffer overflow vulnerability in LibreDWG versions v0.13.3.7571 up to v0.13.3.7835…

LOW 28

Heap buffer overflow vulnerability in LibreDWG versions v0.13.3.7571 up to v0.13.3.7835 allows a crafted DWG file to cause a Denial of Service (DoS) via the function decompress_R2004_section at decode.c.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00259 Published 2026-03-12 No fix listed CWE-122

TI-2023-11381 CVE-2023-26157 · GHSA-5rxp-9658-h93v

Uncontrolled resource consumption in libredwg

LOW 34

Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_pages in decode_r2007.c.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0054 Published 2024-01-02 Fixed in 0.12.5.6384 CWE-400

TI-2023-18184 CVE-2023-36274 · GHSA-fjhg-vc4c-336q

LibreDWG v0.11 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_write_TF at bits.c.

MEDIUM 42

LibreDWG v0.11 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_write_TF at bits.c.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00921 Published 2023-06-23 No fix listed CWE-787

TI-2023-18183 CVE-2023-36273 · GHSA-pggm-5qmx-5jg9

LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c.

HIGH 73

LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00703 Published 2023-06-23 No fix listed CWE-787

TI-2023-18182 CVE-2023-36272 · GHSA-v7hc-4p56-pcfx

LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_utf8_to_TU at bits.c.

HIGH 73

LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_utf8_to_TU at bits.c.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00921 Published 2023-06-23 No fix listed CWE-787

TI-2023-18181 CVE-2023-36271 · GHSA-fx57-4pvv-5x6q

LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_wcs2nlen at bits.c.

HIGH 73

LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_wcs2nlen at bits.c.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00921 Published 2023-06-23 No fix listed CWE-787

TI-2023-10675 CVE-2023-25222 · GHSA-wrhc-5xmp-hp3p

A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bit_read_RC function at bits.c.

HIGH 73

A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bit_read_RC function at bits.c.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00815 Published 2023-03-01 No fix listed CWE-787

TI-2022-22309 CVE-2022-45332 · GHSA-5r42-pgpf-xr9w

LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function…

HIGH 69

LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function decode_preR13_section_hdr at decode_r11.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00315 Published 2022-11-30 No fix listed CWE-787

TI-2022-15873 CVE-2022-35164 · GHSA-c2cm-gvqh-rxhh

LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain.

MEDIUM 44

LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01069 Published 2022-08-18 No fix listed CWE-416

TI-2022-14528 CVE-2022-33034 · GHSA-fff2-r54w-2rmv

LibreDWG v0.12.4.4608 was discovered to contain a stack overflow via the function copy_bytes at decode_r2007.c.

LOW 35

LibreDWG v0.12.4.4608 was discovered to contain a stack overflow via the function copy_bytes at decode_r2007.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00748 Published 2022-06-22 No fix listed CWE-787

TI-2022-14527 CVE-2022-33033 · GHSA-fwf5-52rj-2xr4

LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwg_read_file at dwg.c.

LOW 35

LibreDWG v0.12.4.4608 was discovered to contain a double-free via the function dwg_read_file at dwg.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00749 Published 2022-06-22 No fix listed CWE-415

TI-2022-14526 CVE-2022-33032 · GHSA-8rqh-7hrc-6456

LibreDWG v0.12.4.4608 was discovered to contain a heap-buffer-overflow via the function…

LOW 35

LibreDWG v0.12.4.4608 was discovered to contain a heap-buffer-overflow via the function decode_preR13_section_hdr at decode_r11.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00749 Published 2022-06-22 No fix listed CWE-787

TI-2022-14522 CVE-2022-33025 · GHSA-m9rj-jmp8-c74x

LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function…

LOW 35

LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function decode_preR13_section at decode_r11.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00787 Published 2022-06-22 No fix listed CWE-416

TI-2022-14525 CVE-2022-33028 · GHSA-7jpf-pxm9-7gvh

LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function dwg_add_object at decode.c.

LOW 35

LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function dwg_add_object at decode.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00748 Published 2022-06-22 No fix listed CWE-787

TI-2022-14524 CVE-2022-33027 · GHSA-7c62-jm8f-5c2w

LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function dwg_add_handleref at dwg.c.

LOW 35

LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function dwg_add_handleref at dwg.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00787 Published 2022-06-22 No fix listed CWE-416

TI-2022-14523 CVE-2022-33026 · GHSA-j45c-f64x-f865

LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c.

LOW 35

LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00748 Published 2022-06-22 No fix listed CWE-787

TI-2022-14521 CVE-2022-33024 · GHSA-q69w-w5pf-j6wp

There is an Assertion `int decode_preR13_entities(BITCODE_RL, BITCODE_RL, unsigned int…

LOW 35

There is an Assertion `int decode_preR13_entities(BITCODE_RL, BITCODE_RL, unsigned int, BITCODE_RL, BITCODE_RL, Bit_Chain *, Dwg_Data *' failed at dwg2dxf: decode.c:5801 in libredwg v0.12.4.4608.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01063 Published 2022-06-22 No fix listed CWE-617

TI-2021-18863 CVE-2021-42586 · GHSA-mx9j-5cm7-gv82

A heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.

MEDIUM 40

A heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0103 Published 2022-05-23 No fix listed CWE-787

TI-2021-18862 CVE-2021-42585 · GHSA-cm63-q44g-45j5

A heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in…

MEDIUM 40

A heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01019 Published 2022-05-23 No fix listed CWE-787

TI-2021-20953 CVE-2021-45950 · GHSA-x4cp-hqhf-j5rh

LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in…

LOW 31

LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object).

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00916 Published 2021-12-31 No fix listed CWE-787

TI-2021-09446 CVE-2021-28237 · GHSA-rc9p-cjq8-2vpg

LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.

MEDIUM 45

LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01409 Published 2021-12-02 No fix listed CWE-787

TI-2021-09445 CVE-2021-28236 · GHSA-744v-vg57-852g

LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c.

LOW 35

LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01236 Published 2021-12-02 No fix listed CWE-476

TI-2021-16792 CVE-2021-39525 · GHSA-58qh-2fp2-v597

An issue was discovered in libredwg through v0.10.1.3751.

MEDIUM 40

An issue was discovered in libredwg through v0.10.1.3751.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01065 Published 2021-09-20 No fix listed CWE-787

TI-2021-16791 CVE-2021-39523 · GHSA-274j-j2jx-h7hf

An issue was discovered in libredwg through v0.10.1.3751.

LOW 30

An issue was discovered in libredwg through v0.10.1.3751.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00857 Published 2021-09-20 No fix listed CWE-476

TI-2021-16793 CVE-2021-39527 · GHSA-r468-mhg7-hr93

An issue was discovered in libredwg through v0.10.1.3751.

MEDIUM 40

An issue was discovered in libredwg through v0.10.1.3751.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01065 Published 2021-09-20 No fix listed CWE-787

Vulnerabilities

Filters