Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:libredwg:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Libredwg (051d7dd1-49c1-5a26-8757-6b44ca747b34) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/libredwg/libredwg |
purl2cpe | 2026-06-01 10:11:54.715083 |
pkg:gitlab/libredwg/libredwg |
purl2cpe | 2026-06-01 10:11:54.715085 |
pkg:gnu/libredwg |
purl2cpe | 2026-06-01 10:11:54.715087 |
pkg:rpm/opensuse/libredwg |
purl2cpe | 2026-06-01 10:11:54.715089 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9605 |
vulnerable | 2026-06-08 08:08:59.054974 |
GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow
HIGH (7.3)
A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c of the component Dwgbmp Utility. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. Patch name: 8f03865f37f5d4ffd616fef802acc980be54d300. Applying a patch is the recommended action to fix this issue.
Published: 2026-05-26T23:15:20.385Z
Updated: 2026-05-28T13:52:18.548Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9530 |
vulnerable | 2026-06-08 08:08:59.019219 |
GNU LibreDWG Dwgbmp Utility decode.c read_2004_compressed_section out-of-bounds
LOW (3.3)
A weakness has been identified in GNU LibreDWG up to 0.14. The impacted element is the function read_2004_compressed_section of the file src/decode.c of the component Dwgbmp Utility. Executing a manipulation can lead to out-of-bounds read. The attack requires local access. The exploit has been made available to the public and could be used for attacks. This patch is called 8f03865f37f5d4ffd616fef802acc980be54d300. It is advisable to implement a patch to correct this issue.
Published: 2026-05-26T04:30:11.998Z
Updated: 2026-05-26T15:16:51.780Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9529 |
vulnerable | 2026-06-08 08:08:59.019067 |
GNU LibreDWG Dwggrep Utility dwggrep.c match_BLOCK_HEADER null pointer dereference
LOW (3.3)
A security flaw has been discovered in GNU LibreDWG up to 0.14. The affected element is the function match_BLOCK_HEADER of the file dwggrep.c of the component Dwggrep Utility. Performing a manipulation results in null pointer dereference. The attack requires a local approach. The exploit has been released to the public and may be used for attacks.
Published: 2026-05-26T04:15:10.891Z
Updated: 2026-05-26T12:45:02.086Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9504 |
vulnerable | 2026-06-08 08:08:59.004353 |
GNU LibreDWG Dwggrep Utility dwggrep.c bit_convert_TU out-of-bounds
LOW (3.3)
A weakness has been identified in GNU LibreDWG up to 0.14. Affected is the function bit_convert_TU of the file programs/dwggrep.c of the component Dwggrep Utility. This manipulation causes out-of-bounds read. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. Patch name: be996bf2178a40e98720f18c2414815d244413db. Applying a patch is the recommended action to fix this issue.
Published: 2026-05-25T21:15:11.611Z
Updated: 2026-05-26T15:11:22.474Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9503 |
vulnerable | 2026-06-08 08:08:59.004208 |
GNU LibreDWG DWG File decode.c dwg_next_entity null pointer dereference
LOW (3.3)
A security flaw has been discovered in GNU LibreDWG up to 0.14. This impacts the function dwg_next_entity of the file src/decode.c of the component DWG File Handler. The manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The patch is identified as 8f03865f37f5d4ffd616fef802acc980be54d300. Upgrading the affected component is advised.
Published: 2026-05-25T21:00:16.085Z
Updated: 2026-05-26T12:49:51.105Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9502 |
vulnerable | 2026-06-08 08:08:59.003971 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9501 |
vulnerable | 2026-06-08 08:08:59.003716 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9500 |
vulnerable | 2026-06-08 08:08:59.003402 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36274 |
vulnerable | 2026-06-08 06:06:28.685689 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36272 |
vulnerable | 2026-06-08 06:06:28.685069 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-36271 |
vulnerable | 2026-06-08 06:06:28.684437 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-26157 |
vulnerable | 2026-06-08 05:57:38.760570 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-35164 |
vulnerable | 2026-06-08 05:46:04.225589 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45950 |
vulnerable | 2026-06-08 05:36:49.599289 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42586 |
vulnerable | 2026-06-08 05:35:22.372690 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-42585 |
vulnerable | 2026-06-08 05:35:22.372101 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39530 |
vulnerable | 2026-06-08 05:33:50.236572 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39528 |
vulnerable | 2026-06-08 05:33:50.236316 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39527 |
vulnerable | 2026-06-08 05:33:50.236053 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39525 |
vulnerable | 2026-06-08 05:33:50.235777 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39523 |
vulnerable | 2026-06-08 05:33:50.235394 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39522 |
vulnerable | 2026-06-08 05:33:50.235092 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-39521 |
vulnerable | 2026-06-08 05:33:50.234698 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36080 |
vulnerable | 2026-06-08 05:32:49.685600 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15807 |
vulnerable | 2026-06-08 05:19:26.856585 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20915 |
vulnerable | 2026-06-08 05:13:41.753570 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20914 |
vulnerable | 2026-06-08 05:13:41.753284 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20913 |
vulnerable | 2026-06-08 05:13:41.752993 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20912 |
vulnerable | 2026-06-08 05:13:41.752709 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20911 |
vulnerable | 2026-06-08 05:13:41.752408 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20910 |
vulnerable | 2026-06-08 05:13:41.752086 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20909 |
vulnerable | 2026-06-08 05:13:41.751658 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20014 |
vulnerable | 2026-06-08 05:13:30.380996 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20013 |
vulnerable | 2026-06-08 05:13:30.380505 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-20009 |
vulnerable | 2026-06-08 05:13:30.376551 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14524 |
vulnerable | 2026-06-08 05:10:53.015574 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14471 |
vulnerable | 2026-06-08 05:10:52.963248 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14443 |
vulnerable | 2026-06-08 05:10:52.908864 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.