CVE-2026-62250

The LibreDWG C library (prior to version 0.14.8413 ) is vulnerable to a denial of service (DoS) via a nonterminating loop in the decode_preR13_entities() function located in src/decode.c. A crafted pre-R13 DWG file can trigger this loop because the decode_preR13 function in src/decode_r11.c fails...

CVE-2026-62250 LibreDWG: unbounded allocation in pre-R13 DWG entity decoding

LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make decodepreR13entities in src/decode.c enter a nonterminating loop that allocates a new object each iteration. decodepreR13 in src/decoder11.c computes size from the raw file-controlled...