LI
Product
libredwg
101
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 5High 62Medium 27Low 7
Watch
Add libredwg to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-61154 | 6.5 | Mar 12 | Heap buffer overflow vulnerability in LibreDWG versions v0.13.3.7571 up to v0.13.3.7835 allows a crafted DWG file to cause a Denial of Service (DoS) via the function… Affected: 0.13.3.7571 through 0.13.3.7835 |
| CVE-2021-45950 | 6.5 | Jan 1 | LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object) Affected: 0.12.4.4313 through 0.12.4.4367 |
| CVE-2021-39523 | 6.5 | Sep 20 | An issue was discovered in libredwg through v0.10.1.3751 Affected: through 0.10.1.3751 |
| CVE-2021-39521 | 6.5 | Sep 20 | An issue was discovered in libredwg through v0.10.1.3751 Affected: through 0.10.1.3751 |
| CVE-2020-21839 | 6.5 | May 17 | An issue was discovered in GNU LibreDWG 0.10 Affected: 0.10 |
| CVE-2020-21835 | 6.5 | May 17 | A null pointer deference issue exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2337 Affected: 0.10 |
| CVE-2020-21834 | 6.5 | May 17 | A null pointer deference issue exists in GNU LibreDWG 0.10 via get_bmp ../../programs/dwgbmp.c:164 Affected: 0.10 |
| CVE-2020-21817 | 6.5 | May 17 | A null pointer dereference issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:29 Affected: 0.10.2641 |
| CVE-2020-21815 | 6.5 | May 17 | A null pointer deference issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114, which causes a denial of service (application crash) Affected: 0.10.2641 |
| CVE-2020-15807 | 6.5 | Jul 17 | GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files Affected: before 0.11 |
| CVE-2019-20911 | 6.5 | Jul 16 | An issue was discovered in GNU LibreDWG through 0.9.3 Affected: through 0.9.3 |
| CVE-2020-6615 | 6.5 | Jan 8 | GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwg_dynapi_entity_value in dynapi.c (dynapi.c is generated by gen-dynapi.pl) Affected: 0.9.3.2564 |
| CVE-2020-6611 | 6.5 | Jan 8 | GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in get_next_owned_entity in dwg.c Affected: 0.9.3.2564 |
| CVE-2020-6610 | 6.5 | Jan 8 | GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in read_sections_map in decode_r2007.c Affected: 0.9.3.2564 |
| CVE-2019-20015 | 6.5 | Dec 27 | An issue was discovered in GNU LibreDWG 0.92 Affected: 0.9.2 |
| CVE-2019-20013 | 6.5 | Dec 27 | An issue was discovered in GNU LibreDWG before 0.93 Affected: before 0.9.3 |
| CVE-2019-20012 | 6.5 | Dec 27 | An issue was discovered in GNU LibreDWG 0.92 Affected: 0.9.2 |
| CVE-2019-20009 | 6.5 | Dec 27 | An issue was discovered in GNU LibreDWG before 0.93 Affected: before 0.9.3 |
| CVE-2018-14524 | 6.5 | Jul 23 | dwg_decode_eed in decode.c in GNU LibreDWG before 0.6 leads to a double free (in dwg_free_eed in free.c) because it does not properly manage the obj->eed value after a free occurs Affected: before 0.6 |
| CVE-2018-14471 | 6.5 | Jul 20 | dwg_obj_block_control_get_block_headers in dwg_api.c in GNU LibreDWG 0.5.1048 allows remote attackers to cause a denial of service (NULL pointer dereference and SEGV) via a… Affected: before 0.6 |
| CVE-2018-14443 | 6.5 | Jul 20 | get_first_owned_object in dwg.c in GNU LibreDWG 0.5.1036 allows remote attackers to cause a denial of service (SEGV) Affected: before 0.6 |
| CVE-2026-111167 | 6.1 | Oct 15 | GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs Decoder Affected: through 0.14.8612 |
| CVE-2020-23861 | 5.5 | May 18 | A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c:666:5, which causes a denial of… Affected: 0.10.1 |
| CVE-2026-15520 | 5.3 | Jul 13 | GNU LibreDWG R2004 Section Decompression decode.c decompress_R2004_section heap-based overflow Affected: 0.13.4-154-g0b573035 |
| CVE-2026-15182 | 5.3 | Jul 9 | GNU LibreDWG BMP Image dwg.c dwg_bmp heap-based overflow Affected: 0.13.0; 0.13.1; 0.13.2; 0.13.3; 0.13.4 |
| CVE-2026-9502 | 5.3 | May 25 | GNU LibreDWG Dwgread Utility decode.c decompress_R2004_section heap-based overflow Affected: 0.1; 0.2; 0.3; 0.4; 0.5; 0.6; +8 more |
| CVE-2026-9500 | 5.3 | May 25 | GNU LibreDWG Dwgread Utility decode.c read_2004_compressed_section heap-based overflow Affected: 0.1; 0.2; 0.3; 0.4; 0.5; 0.6; +8 more |
Showing 27