Login Request a demo
LI
Product
libredwg
by GNU · last CVE Oct 15, 2026
101
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities101In the news0Timeline
Severity mix
Critical 5High 62Medium 27Low 7
Severity
All severities101Critical5High62Medium27Low7
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add libredwg to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-33026
7.8
1%
Jun 23
LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c
Affected: All versions, or not specified
CVE-2022-33025
7.8
1%
Jun 23
LibreDWG v0.12.4.4608 was discovered to contain a heap-use-after-free via the function decode_preR13_section at decode_r11.c
Affected: All versions, or not specified
CVE-2020-21827
7.8
1%
May 17
A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2379
Affected: 0.10
CVE-2020-21813
7.8
1%
May 17
A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114
Affected: 0.10.2641
CVE-2023-26157
7.5
1%
Jan 2
Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_pages in decode_r2007.c
Affected: before 0.12.5.6384
CVE-2022-33024
7.5
1%
Jun 23
There is an Assertion `int decode_preR13_entities(BITCODE_RL, BITCODE_RL, unsigned int, BITCODE_RL, BITCODE_RL, Bit_Chain *, Dwg_Data *' failed at dwg2dxf: decode.c:5801 in…
Affected: 0.12.4.4608
CVE-2021-28236
7.5
1%
Dec 2
LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c
Affected: 0.12.3
CVE-2019-20909
7.5
2%
Jul 16
An issue was discovered in GNU LibreDWG through 0.9.3
Affected: through 0.9.3
CVE-2019-9779
7.5
3%
Mar 14
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645
Affected: 0.7; 0.7.1645
CVE-2019-9770
7.5
3%
Mar 14
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645
Affected: 0.7; 0.7.1645
CVE-2019-9771
7.5
3%
Mar 14
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645
Affected: 0.7; 0.7.1645
CVE-2019-9772
7.5
3%
Mar 14
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645
Affected: 0.7; 0.7.1645
CVE-2019-9773
7.5
3%
Mar 14
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645
Affected: 0.7; 0.7.1645
CVE-2019-9776
7.5
3%
Mar 14
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645
Affected: 0.7; 0.7.1645
CVE-2019-9777
7.5
3%
Mar 14
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645
Affected: 0.7; 0.7.1645
CVE-2019-9778
7.5
3%
Mar 14
An issue was discovered in GNU LibreDWG 0.7 and 0.7.1645
Affected: 0.7; 0.7.1645
CVE-2026-9605
7.3
0%
May 26
GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow
Affected: 0.13.4.8160
CVE-2025-61154
6.5
0%
Mar 12
Heap buffer overflow vulnerability in LibreDWG versions v0.13.3.7571 up to v0.13.3.7835 allows a crafted DWG file to cause a Denial of Service (DoS) via the function…
Affected: 0.13.3.7571 through 0.13.3.7835
CVE-2021-45950
6.5
1%
Jan 1
LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object)
Affected: 0.12.4.4313 through 0.12.4.4367
CVE-2021-39523
6.5
1%
Sep 20
An issue was discovered in libredwg through v0.10.1.3751
Affected: through 0.10.1.3751
CVE-2021-39521
6.5
1%
Sep 20
An issue was discovered in libredwg through v0.10.1.3751
Affected: through 0.10.1.3751
CVE-2020-21839
6.5
1%
May 17
An issue was discovered in GNU LibreDWG 0.10
Affected: 0.10
CVE-2020-21835
6.5
1%
May 17
A null pointer deference issue exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2337
Affected: 0.10
CVE-2020-21834
6.5
1%
May 17
A null pointer deference issue exists in GNU LibreDWG 0.10 via get_bmp ../../programs/dwgbmp.c:164
Affected: 0.10
CVE-2020-21817
6.5
1%
May 17
A null pointer dereference issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:29
Affected: 0.10.2641
CVE-2020-21815
6.5
1%
May 17
A null pointer deference issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114, which causes a denial of service (application crash)
Affected: 0.10.2641
CVE-2020-15807
6.5
1%
Jul 17
GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files
Affected: before 0.11
CVE-2019-20911
6.5
1%
Jul 16
An issue was discovered in GNU LibreDWG through 0.9.3
Affected: through 0.9.3
CVE-2020-6615
6.5
2%
Jan 8
GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c (dynapi.c is generated by gen-dynapi.pl)
Affected: 0.9.3.2564
CVE-2020-6611
6.5
2%
Jan 8
GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c
Affected: 0.9.3.2564
CVE-2020-6610
6.5
1%
Jan 8
GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in decode_r2007.c
Affected: 0.9.3.2564
CVE-2019-20015
6.5
1%
Dec 27
An issue was discovered in GNU LibreDWG 0.92
Affected: 0.9.2
CVE-2019-20013
6.5
1%
Dec 27
An issue was discovered in GNU LibreDWG before 0.93
Affected: before 0.9.3
CVE-2019-20012
6.5
1%
Dec 27
An issue was discovered in GNU LibreDWG 0.92
Affected: 0.9.2
CVE-2019-20009
6.5
1%
Dec 27
An issue was discovered in GNU LibreDWG before 0.93
Affected: before 0.9.3
CVE-2018-14524
6.5
1%
Jul 23
dwg_decode_eed in decode.c in GNU LibreDWG before 0.6 leads to a double free (in dwg_free_eed in free.c) because it does not properly manage the obj->eed value after a free occurs
Affected: before 0.6
CVE-2018-14471
6.5
1%
Jul 20
dwg_obj_block_control_get_block_headers in dwg_api.c in GNU LibreDWG 0.5.1048 allows remote attackers to cause a denial of service (NULL pointer dereference and SEGV) via a…
Affected: before 0.6
CVE-2018-14443
6.5
1%
Jul 20
get_first_owned_object in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service (SEGV)
Affected: before 0.6
CVE-2026-111167
6.1
0%
Oct 15
GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs Decoder
Affected: through 0.14.8612
CVE-2020-23861
5.5
1%
May 18
A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c:666:5, which causes a denial of…
Affected: 0.10.1
CVE-2026-15520
5.3
0%
Jul 13
GNU LibreDWG R2004 Section Decompression decode.c decompress_R2004_section heap-based overflow
Affected: 0.13.4-154-g0b573035
CVE-2026-15182
5.3
0%
Jul 9
GNU LibreDWG BMP Image dwg.c dwg_bmp heap-based overflow
Affected: 0.13.0; 0.13.1; 0.13.2; 0.13.3; 0.13.4
CVE-2026-9502
5.3
0%
May 25
GNU LibreDWG Dwgread Utility decode.c decompress_R2004_section heap-based overflow
Affected: 0.1; 0.2; 0.3; 0.4; 0.5; 0.6; +8 more
CVE-2026-9500
5.3
0%
May 25
GNU LibreDWG Dwgread Utility decode.c read_2004_compressed_section heap-based overflow
Affected: 0.1; 0.2; 0.3; 0.4; 0.5; 0.6; +8 more
CVE-2026-90622
3.3
0%
Sep 14
GNU libredwg Layer Encoding dwg.spec DWG_TABLE null pointer dereference
Affected: 0.13.4
CVE-2026-15184
3.3
0%
Jul 9
GNU LibreDWG DWG File dwg.c dwg_next_entity null pointer dereference
Affected: 0.13.0; 0.13.1; 0.13.2; 0.13.3; 0.13.4
CVE-2026-9530
3.3
0%
May 26
GNU LibreDWG Dwgbmp Utility decode.c read_2004_compressed_section out-of-bounds
Affected: 0.1; 0.2; 0.3; 0.4; 0.5; 0.6; +8 more
CVE-2026-9529
3.3
0%
May 26
GNU LibreDWG Dwggrep Utility dwggrep.c match_BLOCK_HEADER null pointer dereference
Affected: 0.1; 0.2; 0.3; 0.4; 0.5; 0.6; +8 more
CVE-2026-9504
3.3
0%
May 25
GNU LibreDWG Dwggrep Utility dwggrep.c bit_convert_TU out-of-bounds
Affected: 0.1; 0.2; 0.3; 0.4; 0.5; 0.6; +8 more
CVE-2026-9503
3.3
0%
May 25
GNU LibreDWG DWG File decode.c dwg_next_entity null pointer dereference
Affected: 0.1; 0.2; 0.3; 0.4; 0.5; 0.6; +8 more
Page 2 of 3 · 101 total
123