CVE-2026-15520 GNU LibreDWG R2004 Section Decompression decode.c decompress_R2004_section heap-based overflow

🗓️ 13 Jul 2026 01:15:16Reported by VulDBType

GNU LibreDWG heap overflow in decompress_R2004_section; local access; upgrade to 0.14.8396.

Reporter	Title	Published	Views	Family All 5
Circl	CVE-2026-15520	13 Jul 202602:27	–	circl
CVE	CVE-2026-15520	13 Jul 202601:15	–	cve
EUVD	EUVD-2026-43263	13 Jul 202601:15	–	euvd
NVD	CVE-2026-15520	13 Jul 202602:16	–	nvd
Positive Technologies	PT-2026-57607	13 Jul 202600:00	–	ptsecurity

[
  {
    "vendor": "GNU",
    "product": "LibreDWG",
    "versions": [
      {
        "version": "0.13.4-154-g0b573035",
        "status": "affected"
      },
      {
        "version": "0.14.8396",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:2.3:a:gnu:libredwg:*:*:*:*:*:*:*:*"
    ],
    "modules": [
      "R2004 Section Decompression"
    ]
  }
]

Source	Link
github	www.github.com/HackC0der/CVE-Repos/blob/main/libredwg/libredwg_0b57303_heap_overflow_decompress_R2004_section.dwg
github	www.github.com/LibreDWG/libredwg/commit/3d0f9fc2eddbd6579c99af3111c37c98f03475d0
vuldb	www.vuldb.com/vuln/377849/cti
vuldb	www.vuldb.com/cve/CVE-2026-15520
vuldb	www.vuldb.com/vuln/377849
gnu	www.gnu.org/
github	www.github.com/advisories/GHSA-qg2f-8389-w95j
github	www.github.com/LibreDWG/libredwg/releases/tag/0.14.8396
github	www.github.com/LibreDWG/libredwg/issues/1251
vuldb	www.vuldb.com/submit/851190

13 Jul 2026 01:15Current

CVSS 24.3

CVSS 44.8

CVSS 3.15.3

CVSS 35.3