VendorsGNUlibredwgall versions
Vulnerabilities

GNU Libredwg

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

88CVEs
CVE-2020-21817
A null pointer dereference issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:29. which causes a denial of service (application crash).
Published 2021-05-17 · Modified
6.5EPSS 0.009
CVE-2021-45950
LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object).
Published 2021-12-31 · Modified
6.5EPSS 0.009
CVE-2021-39521
An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function bit_read_BB() located in bits.c. It allows an attacker to cause Denial of Service.
Published 2021-09-20 · Modified
6.5EPSS 0.009
CVE-2020-21834
A null pointer deference issue exists in GNU LibreDWG 0.10 via get_bmp ../../programs/dwgbmp.c:164.
Published 2021-05-17 · Modified
6.5EPSS 0.009
CVE-2020-21835
A null pointer deference issue exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2337.
Published 2021-05-17 · Modified
6.5EPSS 0.009
CVE-2021-39523
An issue was discovered in libredwg through v0.10.1.3751. A NULL pointer dereference exists in the function check_POLYLINE_handles() located in decode.c. It allows an attacker to cause Denial of Service.
Published 2021-09-20 · Modified
6.5EPSS 0.009
CVE-2025-61154
Heap buffer overflow vulnerability in LibreDWG versions v0.13.3.7571 up to v0.13.3.7835 allows a crafted DWG file to cause a Denial of Service (DoS) via the function decompress_R2004_section at decode.c.
Published 2026-03-12 · Analyzed
6.5EPSS 0.002
CVE-2020-23861
A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c:666:5, which causes a denial of service by submitting a dwg file.
Published 2021-05-18 · Modified
5.5EPSS 0.006
← Prev3 / 3