Medium severity · published Jul 13, 2026
CVE-2026-15520
GNU LibreDWG R2004 Section Decompression decode.c decompress_R2004_section heap-based overflow
5.3
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability was determined in GNU LibreDWG 0.13.4-154-g0b573035. This impacts the function decompress_R2004_section of the file src/decode.c of the component R2004 Section Decompression. Executing a manipulation can lead to heap-based buffer overflow. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.14.8396 will fix this issue. This patch is called 3d0f9fc2eddbd6579c99af3111c37c98f03475d0. You should upgrade the affected component.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
LibreDWG · GNU
0.13.4-154-g0b573035 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-15520
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-15520
github.com
https://github.com/HackC0der/CVE-Repos/blob/main/libredwg/libredwg_0b57303_heap_overflow_decompress_R2004_section.dwg
github.com
https://github.com/LibreDWG/libredwg/commit/3d0f9fc2eddbd6579c99af3111c37c98f03475d0
github.com
https://github.com/LibreDWG/libredwg/issues/1251
github.com
https://github.com/LibreDWG/libredwg/releases/tag/0.14.8396
github.com
https://github.com/advisories/GHSA-qg2f-8389-w95j
vuldb.com
https://vuldb.com/cve/CVE-2026-15520
More from LibreDWG
9.8
CVE-2022-35164
LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to contain a heap use-after-free via bit_copy_chain
9.8
CVE-2021-28237
LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13
9.8
CVE-2019-20914
An issue was discovered in GNU LibreDWG through 0.9.3
9.1
CVE-2019-9774
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645
9.1
CVE-2019-9775
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645