SUSE CVE-2026-54610

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, bitTVtoutf8 in src/bits.c can write to the caller-provided src buffer despite accepting const input. On an iconv error other than E2BIG, the function frees its output buffer and passes the original input alias to bituexpand,...

CVE-2026-62250

LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make decodepreR13entities in src/decode.c enter a nonterminating loop that allocates a new object each iteration. decodepreR13 in src/decoder11.c computes size from the raw file-controlled...

CVE-2026-62254

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, a specially crafted R13-R2000 DWG can trigger algorithmic resource exhaustion in decodeR13R2000 in src/decode.c. The class-decoding loop performs realloc on every iteration without a sanity check on numclasses. Manipulating...

CVE-2026-54610

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, bitTVtoutf8 in src/bits.c can write to the caller-provided src buffer despite accepting const input. On an iconv error other than E2BIG, the function frees its output buffer and passes the original input alias to bituexpand,...

CVE-2026-54610 LibreDWG: const-input mutation and crash in bit_TV_to_utf8 error handling

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, bitTVtoutf8 in src/bits.c can write to the caller-provided src buffer despite accepting const input. On an iconv error other than E2BIG, the function frees its output buffer and passes the original input alias to bituexpand,...

EUVD-2026-114464

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, bitTVtoutf8 in src/bits.c can write to the caller-provided src buffer despite accepting const input. On an iconv error other than E2BIG, the function frees its output buffer and passes the original input alias to bituexpand,...

CVE-2026-54610 LibreDWG: const-input mutation and crash in bit_TV_to_utf8 error handling

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, bitTVtoutf8 in src/bits.c can write to the caller-provided src buffer despite accepting const input. On an iconv error other than E2BIG, the function frees its output buffer and passes the original input alias to bituexpand,...

CVE-2026-54610

The LibreDWG library (versions prior to 0.14 ) contains a vulnerability in the bit_TV_to_utf8() function located in src/bits.c. The root cause is that the function can perform an in-place write to the caller-provided src buffer—despite accepting const input—when an iconv() error (other than E2BIG...

CVE-2026-62250 LibreDWG: unbounded allocation in pre-R13 DWG entity decoding

LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make decodepreR13entities in src/decode.c enter a nonterminating loop that allocates a new object each iteration. decodepreR13 in src/decoder11.c computes size from the raw file-controlled...

EUVD-2026-114463

LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make decodepreR13entities in src/decode.c enter a nonterminating loop that allocates a new object each iteration. decodepreR13 in src/decoder11.c computes size from the raw file-controlled...

CVE-2026-62250 LibreDWG: unbounded allocation in pre-R13 DWG entity decoding

LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make decodepreR13entities in src/decode.c enter a nonterminating loop that allocates a new object each iteration. decodepreR13 in src/decoder11.c computes size from the raw file-controlled...

CVE-2026-62250

The LibreDWG C library (prior to version 0.14.8413 ) is vulnerable to a denial of service (DoS) via a nonterminating loop in the decode_preR13_entities() function located in src/decode.c. A crafted pre-R13 DWG file can trigger this loop because the decode_preR13 function in src/decode_r11.c fails...

EUVD-2026-114462

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, a specially crafted R13-R2000 DWG can trigger algorithmic resource exhaustion in decodeR13R2000 in src/decode.c. The class-decoding loop performs realloc on every iteration without a sanity check on numclasses. Manipulating...

CVE-2026-62254 LibreDWG: excessive class-decoding reallocation in R13-R2000 DWG parsing

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, a specially crafted R13-R2000 DWG can trigger algorithmic resource exhaustion in decodeR13R2000 in src/decode.c. The class-decoding loop performs realloc on every iteration without a sanity check on numclasses. Manipulating...

CVE-2026-62254

The LibreDWG C library (versions prior to 0.14 ) is vulnerable to a denial of service (DoS) via algorithmic resource exhaustion during the parsing of R13-R2000 DWG files. The root cause is located in the decode_R13_R2000 function within src/decode.c, where a loop performs realloc operations witho...

CVE-2026-62254 LibreDWG: excessive class-decoding reallocation in R13-R2000 DWG parsing

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, a specially crafted R13-R2000 DWG can trigger algorithmic resource exhaustion in decodeR13R2000 in src/decode.c. The class-decoding loop performs realloc on every iteration without a sanity check on numclasses. Manipulating...

PT-2026-134200

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, bit TV to utf8 in src/bits.c can write to the caller-provided src buffer despite accepting const input. On an iconv error other than E2BIG, the function frees its output buffer and passes the original input alias to bit u...

CVE-2026-62250: libredwg: LibreDWG is a free C library to read and write DWG files

LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make decodepreR13entities in src/decode.c enter a nonterminating loop that allocates a new object each iteration. decodepreR13 in src/decoder11.c computes size from the raw file-controlled...

CVE-2026-62254: libredwg: LibreDWG is a free C library to read and write DWG files

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, a specially crafted R13-R2000 DWG can trigger algorithmic resource exhaustion in decodeR13R2000 in src/decode.c. The class-decoding loop performs realloc on every iteration without a sanity check on numclasses. Manipulating...

PT-2026-134202

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, a specially crafted R13-R2000 DWG can trigger algorithmic resource exhaustion in decode R13 R2000 in src/decode.c. The class-decoding loop performs realloc on every iteration without a sanity check on num classes. Manipulati...