Gnu Libredwg
99 CVEs affecting Gnu Libredwg. Latest disclosed: 2026-07-13. Critical: 5, High: 61.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-35164 | Critical | 9.8 | 2022-08-18 | LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain. |
CVE-2021-28237 | Critical | 9.8 | 2021-12-02 | LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13. |
CVE-2019-20914 | Critical | 9.8 | 2020-07-16 | An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_common_entity_handle_data in common_entit… |
CVE-2019-9775 | Critical | 9.1 | 2019-03-14 | An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function dwg_dxf_BLOCK_CONTROL at dwg.spec. |
CVE-2019-9774 | Critical | 9.1 | 2019-03-14 | An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645. There is an out-of-bounds read in the function bit_read_B at bits.c. |
CVE-2023-36274 | High | 8.8 | 2023-06-23 | LibreDWG v0.11 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_write_TF at bits.c. |
CVE-2023-36273 | High | 8.8 | 2023-06-23 | LibreDWG v0.12.5 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c. |
CVE-2023-36272 | High | 8.8 | 2023-06-23 | LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_utf8_to_TU at bits.c. |
CVE-2023-36271 | High | 8.8 | 2023-06-23 | LibreDWG v0.10 to v0.12.5 was discovered to contain a heap buffer overflow via the function bit_wcs2nlen at bits.c. |
CVE-2023-25222 | High | 8.8 | 2023-03-01 | A heap-based buffer overflow vulnerability exits in GNU LibreDWG v0.12.5 via the bit_read_RC function at bits.c. |
CVE-2021-42586 | High | 8.8 | 2022-05-23 | A heap buffer overflow was discovered in copy_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file. |
CVE-2021-42585 | High | 8.8 | 2022-05-23 | A heap buffer overflow was discovered in copy_compressed_bytes in decode_r2007.c in dwgread before 0.12.4 via a crafted dwg file. |
CVE-2021-39530 | High | 8.8 | 2021-09-20 | An issue was discovered in libredwg through v0.10.1.3751. bit_wcs2nlen() in bits.c has a heap-based buffer overflow. |
CVE-2021-39528 | High | 8.8 | 2021-09-20 | An issue was discovered in libredwg through v0.10.1.3751. dwg_free_MATERIAL_private() in dwg.spec has a double free. |
CVE-2021-39527 | High | 8.8 | 2021-09-20 | An issue was discovered in libredwg through v0.10.1.3751. appinfo_private() in decode.c has a heap-based buffer overflow. |
CVE-2021-39525 | High | 8.8 | 2021-09-20 | An issue was discovered in libredwg through v0.10.1.3751. bit_read_fixed() in bits.c has a heap-based buffer overflow. |
CVE-2021-39522 | High | 8.8 | 2021-09-20 | An issue was discovered in libredwg through v0.10.1.3751. bit_wcs2len() in bits.c has a heap-based buffer overflow. |
CVE-2021-36080 | High | 8.8 | 2021-07-01 | GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from dwg_encode_MTEXT and dwg_encode_add_object). |
CVE-2020-21844 | High | 8.8 | 2021-05-17 | GNU LibreDWG 0.10 is affected by: memcpy-param-overlap. The impact is: execute arbitrary code (remote). The component is: read_2004_section_header ../../src/de… |
CVE-2020-21843 | High | 8.8 | 2021-05-17 | A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_RC ../../src/bits.c:318. |