CVE-2019-20013

CVE-2019-20013 affects GNU LibreDWG prior to 0.93: crafted input can trigger an excessive memory allocation in decode_3dsolid (dwg.spec). Connected advisories show this as addressed in the libredwg updates to release 0.9.3, with overflow/memory-leak mitigations and additional fuzzing protections....

CVE-2019-20012

CVE-2019-20012 affects GNU LibreDWG up to version 0.92. Crafted input can cause an excessive memory allocation in dwg_decode_HATCH_private (dwg.spec). The Red Hat/OpenSUSE ecosystem references confirm the vulnerability and record fixes in LibreDWG, notably updating to release 0.9.x (e.g., 0.9.3) ...

CVE-2019-20009

CVE-2019-20009 affects GNU LibreDWG prior to 0.93. The issue arises from crafted input causing an attempted excessive memory allocation in dwg_decode_SPLINE_private in dwg.spec, leading to memory exhaustion. Multiple connected advisories (openSUSE/SUSE) document the vulnerability and confirm reme...

CVE-2019-20015

CVE-2019-20015 affects GNU LibreDWG 0.92. Crafted input can trigger an excessive memory allocation in dwg_decode_LWPOLYLINE_private (dwg.spec). Public U/A details are provided across multiple advisories; exploitability status is not stated in the provided documents. OpenSUSE/SUSE advisories show ...

CVE-2020-6615

CVE-2020-6615 affects GNU LibreDWG 0.9.3.2564, with an invalid pointer dereference in dwg_dynapi_entity_value (dynapi.c generated by gen-dynapi.pl). Connected sources tie this CVE to libredwg updates fixing multiple issues in version 0.10, and openSUSE/SUSE advisories list it among 7 vulnerabilit...

CVE-2020-6610

CVE-2020-6610 affects GNU LibreDWG 0.9.3.2564 via an attempted memory allocation overflow in read_sections_map (decode_r2007.c). The issue is documented across multiple sources (NVD entry for CVE-2020-6610 and related OSV/OpenSUSE advisories) and is mitigated by updating libredwg to release 0.10,...

CVE-2020-6611

CVE-2020-6611 affects GNU LibreDWG 0.9.3.2564 with a NULL pointer dereference in get_next_owned_entity (dwg.c). The vulnerability can lead to a crash/denial of service. Connected advisories indicate fixes in LibreDWG to release 0.10 (e.g., openSUSE/SUSE updates referencing CVE-2020-6611 and libre...

CVE-2020-21834

CVE-2020-21834 affects GNU LibreDWG 0.10, with a null pointer dereference in the DWG-to-BMP workflow. The issue is triggered via get_bmp in programs/dwgbmp.c:164, as described across multiple sources (NVD, Red Hat, SUSE, CNVD, and others). Impact is described as a denial of service due to the nul...

CVE-2020-21839

GNU LibreDWG 0.10 is affected by a memory leak in the dwg_decode_eed path (decode.c:3638) triggered by crafted input. Connected sources consistently describe the vulnerability but do not provide a patch or remediation details; no exploitation status is stated. Monitor for updates for a fix.

CVE-2020-21835

CVE-2020-21835 affects GNU LibreDWG 0.10, with a null pointer dereference in the function read_2004_compressed_section (../../src/decode.c:2337). Multiple sources describe it as a denial of service vulnerability in LibreDWG’s DWG reader/writer stack. The primary technical detail available across ...

CVE-2021-39521

Libredwg up to version 0.10.1.3751 contains a NULL pointer dereference in bit_read_BB() (bits.c), leading to Denial of Service. Affected component is the libredwg C library for DWG files. Impact is partial availability (DoS) as described in multiple sources. No exploit details are provided in the...

CVE-2019-20911

CVE-2019-20911 affects GNU LibreDWG up to version 0.9.3. The vulnerability lies in bit_calc_CRC within bits.c, where a crafted input can trigger a denial of service due to a problematic for loop. The connected documents consistently describe DoS potential but do not provide explicit exploitation ...

CVE-2020-21815

CVE-2020-21815 affects GNU LibreDWG 0.10.2641. A null pointer dereference occurs via output_TEXT ../../programs/dwg2SVG.c:114, leading to a denial of service (application crash). The connected sources consistently describe the same issue across multiple feeds (e.g., Red Hat, SUSE, CNVD, NVD). No ...

CVE-2018-14443

The CVE affects GNU LibreDWG, specifically the dwg.c file function get_first_owned_object in version 0.5.1036. The underlying issue allows remote attackers to cause a denial of service via a segmentation fault (SEGV). The provided connected documents confirm the affected component and the crash b...

CVE-2021-39523

The CVE-2021-39523 entry affects the LibreDWG library (v0.10.1.3751 and earlier). A NULL pointer dereference in decode.c::check_POLYLINE_handles() is the root cause, enabling an attacker to cause a Denial of Service. The vulnerability is documented across multiple sources (NVD/SUSE/etc.), but no ...

CVE-2021-45950

CVE-2021-45950 affects LibreDWG 0.12.4.4313 to 0.12.4.4367. The issue is an out-of-bounds write in the function dwg_free_BLOCK_private, which is invoked from dwg_free_BLOCK and dwg_free_object. Multiple sources (Red Hat, SUSE, CNVD, NVD, OSV, CNVD CNVD-2022-52262) corroborate the same description...

CVE-2018-14471

CVE-2018-14471 affects GNU LibreDWG 0.5.1048, where dwg_obj_block_control_get_block_headers (dwg_api.c) can be triggered by a crafted DWG file to cause a denial of service via a NULL pointer dereference/SEGV. The issue is corroborated across multiple issuances (e.g., Red Hat, SUSE, CNVD, OSV, NVD...

CVE-2020-15807

GNU LibreDWG (C library) prior to version 0.11 is affected by a NULL pointer dereference when processing crafted input files. This vulnerability, CVE-2020-15807, is documented across multiple feeds (NVD entry notes a NULL pointer dereference; Red Hat/SUSE/CNVD mirrors echo the same description). ...

CVE-2018-14524

CVE-2018-14524 affects GNU LibreDWG prior to 0.6, with a double-free in dwg_free_eed due to improper management of obj->eed after free during dwg_decode_eed. Affected component: LibreDWG (C library for DWG handling). Root cause: freeing obj->eed without proper reinitialization/handling. Imp...

CVE-2020-21817

CVE-2020-21817 is a null pointer dereference in GNU LibreDWG 0.10.2641, triggered via htmlescape ../../programs/escape.c:29, causing a denial of service (application crash). The vulnerability is confirmed across multiple sources (Red Hat, SUSE, CNVD/CVEs, NVD, OSV, CVE lists). No public exploit d...

CVE-2025-61154

CVE-2025-61154 : A heap buffer overflow in LibreDWG affects versions 0.13.3.7571 through 0.13.3.7835. The overflow occurs in the decompression path while processing DWG files in the function decompress_R2004_section (decode.c), leading to Denial of Service (DoS). The available documents consisten...