CVE-2026-54610

The LibreDWG library (versions prior to 0.14 ) contains a vulnerability in the bit_TV_to_utf8() function located in src/bits.c. The root cause is that the function can perform an in-place write to the caller-provided src buffer—despite accepting const input—when an iconv() error (other than E2BIG...