What’s Vulnerable › Products

GNU LibreDWG vulnerabilities

101 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.

Check whether your GNU LibreDWG version is affected

Latest GNU LibreDWG vulnerabilities

• CVE-2026-111167 — GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs Decoder (CVSS 6.1)
• CVE-2026-90622 — GNU libredwg Layer Encoding dwg.spec DWG_TABLE null pointer dereference (CVSS 3.3)
• CVE-2026-15520 — GNU LibreDWG R2004 Section Decompression decode.c decompress_R2004_section heap-based overflow (CVSS 5.3)
• CVE-2026-15184 — GNU LibreDWG DWG File dwg.c dwg_next_entity null pointer dereference (CVSS 3.3)
• CVE-2026-15182 — GNU LibreDWG BMP Image dwg.c dwg_bmp heap-based overflow (CVSS 5.3)
• CVE-2026-9605 — GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow (CVSS 7.3)
• CVE-2026-9530 — GNU LibreDWG Dwgbmp Utility decode.c read_2004_compressed_section out-of-bounds (CVSS 3.3)
• CVE-2026-9529 — GNU LibreDWG Dwggrep Utility dwggrep.c match_BLOCK_HEADER null pointer dereference (CVSS 3.3)
• CVE-2026-9504 — GNU LibreDWG Dwggrep Utility dwggrep.c bit_convert_TU out-of-bounds (CVSS 3.3)
• CVE-2026-9503 — GNU LibreDWG DWG File decode.c dwg_next_entity null pointer dereference (CVSS 3.3)
• CVE-2026-9502 — GNU LibreDWG Dwgread Utility decode.c decompress_R2004_section heap-based overflow (CVSS 5.3)
• CVE-2026-9501 — GNU LibreDWG Dwgread Utility decode.c decompress_R2004_section assertion (CVSS 3.3)
• CVE-2026-9500 — GNU LibreDWG Dwgread Utility decode.c read_2004_compressed_section heap-based overflow (CVSS 5.3)
• CVE-2025-61154 — (CVSS 6.5)
• CVE-2023-26157 — (CVSS 7.5)
• CVE-2023-36274 — (CVSS 8.8)
• CVE-2023-36273 — (CVSS 8.8)
• CVE-2023-36272 — (CVSS 8.8)
• CVE-2023-36271 — (CVSS 8.8)
• CVE-2023-25222 — (CVSS 8.8)
• CVE-2022-45332 — (CVSS 7.8)
• CVE-2022-35164 — (CVSS 9.8)
• CVE-2022-33034 — (CVSS 7.8)
• CVE-2022-33033 — (CVSS 7.8)
• CVE-2022-33032 — (CVSS 7.8)