CVE-2019-9775

CVE-2019-9775 affects GNU LibreDWG 0.7 and 0.7.1645 and describes an out-of-bounds read in the function dwg_dxf_BLOCK_CONTROL at dwg.spec. The connected advisories confirm this vulnerability is addressed in newer LibreDWG releases (e.g., libredwg 0.9.x series; OpenSUSE/SUSE advisories reference 0...

CVE-2019-9774

CVE-2019-9774 concerns an out-of-bounds read in GNU LibreDWG 0.7 and 0.7.1645, specifically in bit_read_B (bits.c). Connected documents show downstream fixes in libredwg/OpenSUSE releases, notably a 0.9.x line with multiple CVEs fixed (e.g., CVE-2019-9774 and related issues) and security updates ...

CVE-2022-35164

LibreDWG is affected by CVE-2022-35164: v0.12.4.4608 with commit f2dea29 contains a heap use-after-free in bit_copy_chain. The CVSSv3.1 base score is 9.8 (CRITICAL). Remediation available: the OpenSUSE OSV advisory notes the fix is included in libredwg-devel-0.12.5-3.1 on the GA media. Per the Re...

CVE-2021-28237

CVE-2021-28237 affects LibreDWG v0.12.3 and is caused by a heap-buffer overflow in decode_preR13. Public sources consistently describe this as a vulnerability in LibreDWG, with OpenSUSE/SUSE advisories noting a release update to 0.12.5 to fix the issue and mitigate oss‑fuzz errors by restricting ...

CVE-2019-20914

GNU LibreDWG up to version 0.9.3 contains a NULL pointer dereference in dwg_encode_common_entity_handle_data (common_entity_handle_data.spec). This vulnerability is documented across multiple sources (Red Hat, SUSE, NVD, OSV, etc.). The available connected documents confirm the issue but do not p...