CVE-2026-62250 LibreDWG: unbounded allocation in pre-R13 DWG entity decoding

LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make decodepreR13entities in src/decode.c enter a nonterminating loop that allocates a new object each iteration. decodepreR13 in src/decoder11.c computes size from the raw file-controlled...

CVE-2026-62250

The LibreDWG C library (prior to version 0.14.8413 ) is vulnerable to a denial of service (DoS) via a nonterminating loop in the decode_preR13_entities() function located in src/decode.c. A crafted pre-R13 DWG file can trigger this loop because the decode_preR13 function in src/decode_r11.c fails...

CVE-2026-62250 LibreDWG: unbounded allocation in pre-R13 DWG entity decoding

LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make decodepreR13entities in src/decode.c enter a nonterminating loop that allocates a new object each iteration. decodepreR13 in src/decoder11.c computes size from the raw file-controlled...

libredwg:llvmfuzz: Heap-buffer-overflow in decode_preR13_entities

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4645218001223680 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 10 Crash Address:...

libredwg:llvmfuzz: Heap-buffer-overflow in decode_preR13_section_hdr

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=6728905173630976 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...