Vulnerability-Lookup

OPENSUSE-SU-2026:10879-1

Vulnerability from csaf_opensuse - Published: 2026-05-28 00:00 - Updated: 2026-09-17 17:06

Summary

libredwg-devel-0.13.4.8200-1.1 on GA media

Severity

Moderate

Notes

Title of the patch: libredwg-devel-0.13.4.8200-1.1 on GA media

Description of the patch: These are all security issues fixed in the libredwg-devel-0.13.4.8200-1.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2026-10879

CVE-2026-9501

Affected products

Recommended 12 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.x86_64	—	Vendor Fix

Threats

Impact low

CVE-2026-9503

Affected products

Recommended 12 products, the same list as for CVE-2026-9501

Threats

Impact low

CVE-2026-9504

Affected products

Recommended 12 products, the same list as for CVE-2026-9501

Threats

Impact low

CVE-2026-9605

Affected products

Recommended 12 products, the same list as for CVE-2026-9501

Threats

Impact important

References

15 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2026-9501/	self
https://www.suse.com/security/cve/CVE-2026-9503/	self
https://www.suse.com/security/cve/CVE-2026-9504/	self
https://www.suse.com/security/cve/CVE-2026-9605/	self
https://www.suse.com/security/cve/CVE-2026-9501	external
https://bugzilla.suse.com/1266377	external
https://www.suse.com/security/cve/CVE-2026-9503	external
https://bugzilla.suse.com/1266379	external
https://bugzilla.suse.com/1271170	external
https://www.suse.com/security/cve/CVE-2026-9504	external
https://bugzilla.suse.com/1266321	external
https://www.suse.com/security/cve/CVE-2026-9605	external
https://bugzilla.suse.com/1266365	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "libredwg-devel-0.13.4.8200-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the libredwg-devel-0.13.4.8200-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-10879",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10879-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-9501 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-9501/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-9503 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-9503/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-9504 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-9504/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-9605 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-9605/"
      }
    ],
    "title": "libredwg-devel-0.13.4.8200-1.1 on GA media",
    "tracking": {
      "current_release_date": "2026-09-17T17:06:59Z",
      "generator": {
        "date": "2026-05-28T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:10879-1",
      "initial_release_date": "2026-05-28T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-05-28T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T20:12:15Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T21:13:29Z",
          "number": "3",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-17T17:06:59Z",
          "number": "4",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libredwg-devel-0:0.13.4.8200-1.1.aarch64",
                "product": {
                  "name": "libredwg-devel-0:0.13.4.8200-1.1.aarch64",
                  "product_id": "libredwg-devel-0:0.13.4.8200-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libredwg-devel@0.13.4.8200-1.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libredwg-tools-0:0.13.4.8200-1.1.aarch64",
                "product": {
                  "name": "libredwg-tools-0:0.13.4.8200-1.1.aarch64",
                  "product_id": "libredwg-tools-0:0.13.4.8200-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libredwg-tools@0.13.4.8200-1.1?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libredwg0-0:0.13.4.8200-1.1.aarch64",
                "product": {
                  "name": "libredwg0-0:0.13.4.8200-1.1.aarch64",
                  "product_id": "libredwg0-0:0.13.4.8200-1.1.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libredwg0@0.13.4.8200-1.1?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libredwg-devel-0:0.13.4.8200-1.1.ppc64le",
                "product": {
                  "name": "libredwg-devel-0:0.13.4.8200-1.1.ppc64le",
                  "product_id": "libredwg-devel-0:0.13.4.8200-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libredwg-devel@0.13.4.8200-1.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libredwg-tools-0:0.13.4.8200-1.1.ppc64le",
                "product": {
                  "name": "libredwg-tools-0:0.13.4.8200-1.1.ppc64le",
                  "product_id": "libredwg-tools-0:0.13.4.8200-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libredwg-tools@0.13.4.8200-1.1?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libredwg0-0:0.13.4.8200-1.1.ppc64le",
                "product": {
                  "name": "libredwg0-0:0.13.4.8200-1.1.ppc64le",
                  "product_id": "libredwg0-0:0.13.4.8200-1.1.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libredwg0@0.13.4.8200-1.1?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libredwg-devel-0:0.13.4.8200-1.1.s390x",
                "product": {
                  "name": "libredwg-devel-0:0.13.4.8200-1.1.s390x",
                  "product_id": "libredwg-devel-0:0.13.4.8200-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libredwg-devel@0.13.4.8200-1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libredwg-tools-0:0.13.4.8200-1.1.s390x",
                "product": {
                  "name": "libredwg-tools-0:0.13.4.8200-1.1.s390x",
                  "product_id": "libredwg-tools-0:0.13.4.8200-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libredwg-tools@0.13.4.8200-1.1?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libredwg0-0:0.13.4.8200-1.1.s390x",
                "product": {
                  "name": "libredwg0-0:0.13.4.8200-1.1.s390x",
                  "product_id": "libredwg0-0:0.13.4.8200-1.1.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libredwg0@0.13.4.8200-1.1?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "libredwg-devel-0:0.13.4.8200-1.1.x86_64",
                "product": {
                  "name": "libredwg-devel-0:0.13.4.8200-1.1.x86_64",
                  "product_id": "libredwg-devel-0:0.13.4.8200-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libredwg-devel@0.13.4.8200-1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libredwg-tools-0:0.13.4.8200-1.1.x86_64",
                "product": {
                  "name": "libredwg-tools-0:0.13.4.8200-1.1.x86_64",
                  "product_id": "libredwg-tools-0:0.13.4.8200-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libredwg-tools@0.13.4.8200-1.1?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "libredwg0-0:0.13.4.8200-1.1.x86_64",
                "product": {
                  "name": "libredwg0-0:0.13.4.8200-1.1.x86_64",
                  "product_id": "libredwg0-0:0.13.4.8200-1.1.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/libredwg0@0.13.4.8200-1.1?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libredwg-devel-0:0.13.4.8200-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.aarch64"
        },
        "product_reference": "libredwg-devel-0:0.13.4.8200-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libredwg-devel-0:0.13.4.8200-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.ppc64le"
        },
        "product_reference": "libredwg-devel-0:0.13.4.8200-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libredwg-devel-0:0.13.4.8200-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.s390x"
        },
        "product_reference": "libredwg-devel-0:0.13.4.8200-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libredwg-devel-0:0.13.4.8200-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.x86_64"
        },
        "product_reference": "libredwg-devel-0:0.13.4.8200-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libredwg-tools-0:0.13.4.8200-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.aarch64"
        },
        "product_reference": "libredwg-tools-0:0.13.4.8200-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libredwg-tools-0:0.13.4.8200-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.ppc64le"
        },
        "product_reference": "libredwg-tools-0:0.13.4.8200-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libredwg-tools-0:0.13.4.8200-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.s390x"
        },
        "product_reference": "libredwg-tools-0:0.13.4.8200-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libredwg-tools-0:0.13.4.8200-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.x86_64"
        },
        "product_reference": "libredwg-tools-0:0.13.4.8200-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libredwg0-0:0.13.4.8200-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.aarch64"
        },
        "product_reference": "libredwg0-0:0.13.4.8200-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libredwg0-0:0.13.4.8200-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.ppc64le"
        },
        "product_reference": "libredwg0-0:0.13.4.8200-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libredwg0-0:0.13.4.8200-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.s390x"
        },
        "product_reference": "libredwg0-0:0.13.4.8200-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libredwg0-0:0.13.4.8200-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.x86_64"
        },
        "product_reference": "libredwg0-0:0.13.4.8200-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-9501",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-9501"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A vulnerability was determined in GNU LibreDWG up to 0.14. The impacted element is the function decompress_R2004_section of the file src/decode.c of the component Dwgread Utility. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. This patch is called e501cb9926c1e9a07a0d1cc997f3e69e9be801c9. A patch should be applied to remediate this issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.aarch64",
          "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.ppc64le",
          "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.s390x",
          "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.x86_64",
          "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.aarch64",
          "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.ppc64le",
          "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.s390x",
          "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.x86_64",
          "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.aarch64",
          "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.ppc64le",
          "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.s390x",
          "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-9501",
          "url": "https://www.suse.com/security/cve/CVE-2026-9501"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266377 for CVE-2026-9501",
          "url": "https://bugzilla.suse.com/1266377"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.aarch64",
            "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.ppc64le",
            "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.s390x",
            "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.x86_64",
            "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.aarch64",
            "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.ppc64le",
            "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.s390x",
            "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.x86_64",
            "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.aarch64",
            "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.ppc64le",
            "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.s390x",
            "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-28T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-9501"
    },
    {
      "cve": "CVE-2026-9503",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-9503"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A security flaw has been discovered in GNU LibreDWG up to 0.14. This impacts the function dwg_next_entity of the file src/decode.c of the component DWG File Handler. The manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The patch is identified as 8f03865f37f5d4ffd616fef802acc980be54d300. Upgrading the affected component is advised.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.aarch64",
          "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.ppc64le",
          "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.s390x",
          "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.x86_64",
          "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.aarch64",
          "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.ppc64le",
          "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.s390x",
          "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.x86_64",
          "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.aarch64",
          "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.ppc64le",
          "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.s390x",
          "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-9503",
          "url": "https://www.suse.com/security/cve/CVE-2026-9503"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266379 for CVE-2026-9503",
          "url": "https://bugzilla.suse.com/1266379"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271170 for CVE-2026-9503",
          "url": "https://bugzilla.suse.com/1271170"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.aarch64",
            "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.ppc64le",
            "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.s390x",
            "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.x86_64",
            "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.aarch64",
            "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.ppc64le",
            "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.s390x",
            "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.x86_64",
            "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.aarch64",
            "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.ppc64le",
            "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.s390x",
            "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-28T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-9503"
    },
    {
      "cve": "CVE-2026-9504",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-9504"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A weakness has been identified in GNU LibreDWG up to 0.14. Affected is the function bit_convert_TU of the file programs/dwggrep.c of the component Dwggrep Utility. This manipulation causes out-of-bounds read. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. Patch name: be996bf2178a40e98720f18c2414815d244413db. Applying a patch is the recommended action to fix this issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.aarch64",
          "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.ppc64le",
          "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.s390x",
          "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.x86_64",
          "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.aarch64",
          "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.ppc64le",
          "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.s390x",
          "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.x86_64",
          "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.aarch64",
          "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.ppc64le",
          "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.s390x",
          "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-9504",
          "url": "https://www.suse.com/security/cve/CVE-2026-9504"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266321 for CVE-2026-9504",
          "url": "https://bugzilla.suse.com/1266321"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.aarch64",
            "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.ppc64le",
            "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.s390x",
            "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.x86_64",
            "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.aarch64",
            "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.ppc64le",
            "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.s390x",
            "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.x86_64",
            "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.aarch64",
            "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.ppc64le",
            "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.s390x",
            "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-28T00:00:00Z",
          "details": "low"
        }
      ],
      "title": "CVE-2026-9504"
    },
    {
      "cve": "CVE-2026-9605",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-9605"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c of the component Dwgbmp Utility. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. Patch name: 8f03865f37f5d4ffd616fef802acc980be54d300. Applying a patch is the recommended action to fix this issue.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.aarch64",
          "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.ppc64le",
          "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.s390x",
          "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.x86_64",
          "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.aarch64",
          "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.ppc64le",
          "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.s390x",
          "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.x86_64",
          "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.aarch64",
          "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.ppc64le",
          "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.s390x",
          "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-9605",
          "url": "https://www.suse.com/security/cve/CVE-2026-9605"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1266365 for CVE-2026-9605",
          "url": "https://bugzilla.suse.com/1266365"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.aarch64",
            "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.ppc64le",
            "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.s390x",
            "openSUSE Tumbleweed:libredwg-devel-0:0.13.4.8200-1.1.x86_64",
            "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.aarch64",
            "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.ppc64le",
            "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.s390x",
            "openSUSE Tumbleweed:libredwg-tools-0:0.13.4.8200-1.1.x86_64",
            "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.aarch64",
            "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.ppc64le",
            "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.s390x",
            "openSUSE Tumbleweed:libredwg0-0:0.13.4.8200-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-28T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-9605"
    }
  ]
}

CVE-2026-9501 (GCVE-0-2026-9501)

Vulnerability from cvelistv5 – Published: 2026-05-25 20:30 – Updated: 2026-05-28 12:50 X_Open Source

Title

GNU LibreDWG Dwgread Utility decode.c decompress_R2004_section assertion

Summary

A vulnerability was determined in GNU LibreDWG up to 0.14. The impacted element is the function decompress_R2004_section of the file src/decode.c of the component Dwgread Utility. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. This patch is called e501cb9926c1e9a07a0d1cc997f3e69e9be801c9. A patch should be applied to remediate this issue.

Severity

4.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

3.3 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

3.3 (Low)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-28 12:50 UTC

CWE

CWE-617 - Reachable Assertion

Assigner

VulDB mitre root

References

7 references

URL	Tags
https://vuldb.com/vuln/365483	vdb-entrytechnical-description
https://vuldb.com/vuln/365483/cti	signaturepermissions-required
https://vuldb.com/submit/814250	third-party-advisory
https://github.com/LibreDWG/libredwg/issues/1242	issue-tracking
https://github.com/HackC0der/CVE-Repos/blob/main/…	exploit
https://github.com/LibreDWG/libredwg/commit/e501c…	patch
https://www.gnu.org/	product

Impacted products

1 product

Vendor	Product	Version
GNU	LibreDWG	Affected: 0.1 Affected: 0.2 Affected: 0.3 Affected: 0.4 Affected: 0.5 Affected: 0.6 Affected: 0.7 Affected: 0.8 Affected: 0.9 Affected: 0.10 Affected: 0.11 Affected: 0.12 Affected: 0.13 Affected: 0.14 cpe:2.3:a:gnu:libredwg::::::::

Credits

pwn3rd (VulDB User)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-9501",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-28T12:50:49.130738Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-28T12:50:57.818Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:gnu:libredwg:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Dwgread Utility"
          ],
          "product": "LibreDWG",
          "vendor": "GNU",
          "versions": [
            {
              "status": "affected",
              "version": "0.1"
            },
            {
              "status": "affected",
              "version": "0.2"
            },
            {
              "status": "affected",
              "version": "0.3"
            },
            {
              "status": "affected",
              "version": "0.4"
            },
            {
              "status": "affected",
              "version": "0.5"
            },
            {
              "status": "affected",
              "version": "0.6"
            },
            {
              "status": "affected",
              "version": "0.7"
            },
            {
              "status": "affected",
              "version": "0.8"
            },
            {
              "status": "affected",
              "version": "0.9"
            },
            {
              "status": "affected",
              "version": "0.10"
            },
            {
              "status": "affected",
              "version": "0.11"
            },
            {
              "status": "affected",
              "version": "0.12"
            },
            {
              "status": "affected",
              "version": "0.13"
            },
            {
              "status": "affected",
              "version": "0.14"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "pwn3rd (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability was determined in GNU LibreDWG up to 0.14. The impacted element is the function decompress_R2004_section of the file src/decode.c of the component Dwgread Utility. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. This patch is called e501cb9926c1e9a07a0d1cc997f3e69e9be801c9. A patch should be applied to remediate this issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 1.7,
            "vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:OF/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-617",
              "description": "Reachable Assertion",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-25T20:30:14.389Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-365483 | GNU LibreDWG Dwgread Utility decode.c decompress_R2004_section assertion",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/365483"
        },
        {
          "name": "VDB-365483 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/365483/cti"
        },
        {
          "name": "Submit #814250 | LibreDWG Project LibreDWG \u003c= 0.14, main branch up to commit 6d6a339 (released 2026-04-10) Reachable Assertion (CWE-617)",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/814250"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/LibreDWG/libredwg/issues/1242"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://github.com/HackC0der/CVE-Repos/blob/main/libredwg/libredwg_6d6a339_assert_fail_decompress_R2004_section.dwg"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/LibreDWG/libredwg/commit/e501cb9926c1e9a07a0d1cc997f3e69e9be801c9"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://www.gnu.org/"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-25T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-05-25T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-05-25T12:09:56.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "GNU LibreDWG Dwgread Utility decode.c decompress_R2004_section assertion"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-9501",
    "datePublished": "2026-05-25T20:30:14.389Z",
    "dateReserved": "2026-05-25T10:03:51.326Z",
    "dateUpdated": "2026-05-28T12:50:57.818Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-9503 (GCVE-0-2026-9503)

Vulnerability from cvelistv5 – Published: 2026-05-25 21:00 – Updated: 2026-05-26 12:49 X_Open Source

Title

GNU LibreDWG DWG File decode.c dwg_next_entity null pointer dereference

Summary

A security flaw has been discovered in GNU LibreDWG up to 0.14. This impacts the function dwg_next_entity of the file src/decode.c of the component DWG File Handler. The manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The patch is identified as 8f03865f37f5d4ffd616fef802acc980be54d300. Upgrading the affected component is advised.

Severity

4.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

3.3 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

3.3 (Low)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-26 12:49 UTC

CWE

CWE-476 - NULL Pointer Dereference
CWE-404 - Denial of Service

Assigner

VulDB mitre root

References

7 references

URL	Tags
https://vuldb.com/vuln/365485	vdb-entrytechnical-description
https://vuldb.com/vuln/365485/cti	signaturepermissions-required
https://vuldb.com/submit/814260	third-party-advisory
https://github.com/LibreDWG/libredwg/issues/1245	issue-tracking
https://github.com/HackC0der/CVE-Repos/blob/main/…	exploit
https://github.com/LibreDWG/libredwg/commit/8f038…	patch
https://www.gnu.org/	product

Impacted products

1 product

Vendor	Product	Version
GNU	LibreDWG	Affected: 0.1 Affected: 0.2 Affected: 0.3 Affected: 0.4 Affected: 0.5 Affected: 0.6 Affected: 0.7 Affected: 0.8 Affected: 0.9 Affected: 0.10 Affected: 0.11 Affected: 0.12 Affected: 0.13 Affected: 0.14 cpe:2.3:a:gnu:libredwg::::::::

Credits

pwn3rd (VulDB User)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-9503",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-26T12:49:42.693059Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-26T12:49:51.105Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:gnu:libredwg:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "DWG File Handler"
          ],
          "product": "LibreDWG",
          "vendor": "GNU",
          "versions": [
            {
              "status": "affected",
              "version": "0.1"
            },
            {
              "status": "affected",
              "version": "0.2"
            },
            {
              "status": "affected",
              "version": "0.3"
            },
            {
              "status": "affected",
              "version": "0.4"
            },
            {
              "status": "affected",
              "version": "0.5"
            },
            {
              "status": "affected",
              "version": "0.6"
            },
            {
              "status": "affected",
              "version": "0.7"
            },
            {
              "status": "affected",
              "version": "0.8"
            },
            {
              "status": "affected",
              "version": "0.9"
            },
            {
              "status": "affected",
              "version": "0.10"
            },
            {
              "status": "affected",
              "version": "0.11"
            },
            {
              "status": "affected",
              "version": "0.12"
            },
            {
              "status": "affected",
              "version": "0.13"
            },
            {
              "status": "affected",
              "version": "0.14"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "pwn3rd (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A security flaw has been discovered in GNU LibreDWG up to 0.14. This impacts the function dwg_next_entity of the file src/decode.c of the component DWG File Handler. The manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The patch is identified as 8f03865f37f5d4ffd616fef802acc980be54d300. Upgrading the affected component is advised."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 1.7,
            "vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:OF/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-404",
              "description": "Denial of Service",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-25T21:00:16.085Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-365485 | GNU LibreDWG DWG File decode.c dwg_next_entity null pointer dereference",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/365485"
        },
        {
          "name": "VDB-365485 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/365485/cti"
        },
        {
          "name": "Submit #814260 | LibreDWG Project LibreDWG \u003c= 0.14, main branch up to commit 6d6a339 (2026-04-10) NULL Pointer Dereference (CWE-476)",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/814260"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/LibreDWG/libredwg/issues/1245"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://github.com/HackC0der/CVE-Repos/blob/main/libredwg/libredwg_6d6a339_heap_oob_write_read_2004_compressed_section.dwg"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/LibreDWG/libredwg/commit/8f03865f37f5d4ffd616fef802acc980be54d300"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://www.gnu.org/"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-25T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-05-25T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-05-25T12:10:02.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "GNU LibreDWG DWG File decode.c dwg_next_entity null pointer dereference"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-9503",
    "datePublished": "2026-05-25T21:00:16.085Z",
    "dateReserved": "2026-05-25T10:04:25.840Z",
    "dateUpdated": "2026-05-26T12:49:51.105Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-9504 (GCVE-0-2026-9504)

Vulnerability from cvelistv5 – Published: 2026-05-25 21:15 – Updated: 2026-05-26 15:11 X_Open Source

Title

GNU LibreDWG Dwggrep Utility dwggrep.c bit_convert_TU out-of-bounds

Summary

A weakness has been identified in GNU LibreDWG up to 0.14. Affected is the function bit_convert_TU of the file programs/dwggrep.c of the component Dwggrep Utility. This manipulation causes out-of-bounds read. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. Patch name: be996bf2178a40e98720f18c2414815d244413db. Applying a patch is the recommended action to fix this issue.

Severity

4.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

3.3 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C

3.3 (Low)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-26 15:10 UTC

CWE

CWE-125 - Out-of-Bounds Read
CWE-119 - Memory Corruption

Assigner

VulDB mitre root

References

7 references

URL	Tags
https://vuldb.com/vuln/365486	vdb-entrytechnical-description
https://vuldb.com/vuln/365486/cti	signaturepermissions-required
https://vuldb.com/submit/814261	third-party-advisory
https://github.com/LibreDWG/libredwg/issues/1246	issue-tracking
https://github.com/HackC0der/CVE-Repos/blob/main/…	exploit
https://github.com/LibreDWG/libredwg/commit/be996…	patch
https://www.gnu.org/	product

Impacted products

1 product

Vendor	Product	Version
GNU	LibreDWG	Affected: 0.1 Affected: 0.2 Affected: 0.3 Affected: 0.4 Affected: 0.5 Affected: 0.6 Affected: 0.7 Affected: 0.8 Affected: 0.9 Affected: 0.10 Affected: 0.11 Affected: 0.12 Affected: 0.13 Affected: 0.14 cpe:2.3:a:gnu:libredwg::::::::

Credits

pwn3rd (VulDB User)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-9504",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-26T15:10:39.688557Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-26T15:11:22.474Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/LibreDWG/libredwg/issues/1246"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:gnu:libredwg:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Dwggrep Utility"
          ],
          "product": "LibreDWG",
          "vendor": "GNU",
          "versions": [
            {
              "status": "affected",
              "version": "0.1"
            },
            {
              "status": "affected",
              "version": "0.2"
            },
            {
              "status": "affected",
              "version": "0.3"
            },
            {
              "status": "affected",
              "version": "0.4"
            },
            {
              "status": "affected",
              "version": "0.5"
            },
            {
              "status": "affected",
              "version": "0.6"
            },
            {
              "status": "affected",
              "version": "0.7"
            },
            {
              "status": "affected",
              "version": "0.8"
            },
            {
              "status": "affected",
              "version": "0.9"
            },
            {
              "status": "affected",
              "version": "0.10"
            },
            {
              "status": "affected",
              "version": "0.11"
            },
            {
              "status": "affected",
              "version": "0.12"
            },
            {
              "status": "affected",
              "version": "0.13"
            },
            {
              "status": "affected",
              "version": "0.14"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "pwn3rd (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A weakness has been identified in GNU LibreDWG up to 0.14. Affected is the function bit_convert_TU of the file programs/dwggrep.c of the component Dwggrep Utility. This manipulation causes out-of-bounds read. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. Patch name: be996bf2178a40e98720f18c2414815d244413db. Applying a patch is the recommended action to fix this issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 1.7,
            "vectorString": "AV:L/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:OF/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out-of-Bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "Memory Corruption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-25T21:15:11.611Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-365486 | GNU LibreDWG Dwggrep Utility dwggrep.c bit_convert_TU out-of-bounds",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/365486"
        },
        {
          "name": "VDB-365486 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/365486/cti"
        },
        {
          "name": "Submit #814261 | LibreDWG Project LibreDWG \u003c= 0.14, main branch up to commit 6d6a339 (2026-04-10) Out-of-bounds Read (CWE-125)",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/814261"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/LibreDWG/libredwg/issues/1246"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://github.com/HackC0der/CVE-Repos/blob/main/libredwg/libredwg_6d6a339_heap_overflow_bit_convert_TU.dwg"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/LibreDWG/libredwg/commit/be996bf2178a40e98720f18c2414815d244413db"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://www.gnu.org/"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-25T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-05-25T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-05-25T12:10:05.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "GNU LibreDWG Dwggrep Utility dwggrep.c bit_convert_TU out-of-bounds"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-9504",
    "datePublished": "2026-05-25T21:15:11.611Z",
    "dateReserved": "2026-05-25T10:04:28.109Z",
    "dateUpdated": "2026-05-26T15:11:22.474Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-9605 (GCVE-0-2026-9605)

Vulnerability from cvelistv5 – Published: 2026-05-26 23:15 – Updated: 2026-05-28 13:52 X_Open Source

Title

GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow

Summary

A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c of the component Dwgbmp Utility. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. Patch name: 8f03865f37f5d4ffd616fef802acc980be54d300. Applying a patch is the recommended action to fix this issue.

Severity

6.9 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

7.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

7.3 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-28 13:51 UTC

CWE

CWE-122 - Heap-based Buffer Overflow
CWE-119 - Memory Corruption

Assigner

VulDB mitre root

References

7 references

URL	Tags
https://vuldb.com/vuln/365678	vdb-entrytechnical-description
https://vuldb.com/vuln/365678/cti	signaturepermissions-required
https://vuldb.com/submit/818197	third-party-advisory
https://github.com/LibreDWG/libredwg/issues/1248	issue-tracking
https://github.com/HackC0der/CVE-Repos/blob/main/…	exploit
https://github.com/LibreDWG/libredwg/commit/8f038…	patch
https://www.gnu.org/	broken-linkproduct

Impacted products

1 product

Vendor	Product	Version
GNU	libredwg	Affected: 0.13.4.8160 cpe:2.3:a:gnu:libredwg::::::::

Credits

r1ck9 (VulDB User)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-9605",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-28T13:51:50.086261Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-28T13:52:18.548Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://vuldb.com/submit/818197"
          },
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/LibreDWG/libredwg/issues/1248"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:gnu:libredwg:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Dwgbmp Utility"
          ],
          "product": "libredwg",
          "vendor": "GNU",
          "versions": [
            {
              "status": "affected",
              "version": "0.13.4.8160"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "r1ck9 (VulDB User)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c of the component Dwgbmp Utility. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. Patch name: 8f03865f37f5d4ffd616fef802acc980be54d300. Applying a patch is the recommended action to fix this issue."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 7.5,
            "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "Memory Corruption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-26T23:15:20.385Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-365678 | GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/365678"
        },
        {
          "name": "VDB-365678 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/365678/cti"
        },
        {
          "name": "Submit #818197 | LibreDWG libredwg (including the dwgbmp utility) 0.13.4.8160 Buffer Overflow",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/818197"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://github.com/LibreDWG/libredwg/issues/1248"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://github.com/HackC0der/CVE-Repos/blob/main/libredwg/libredwg_6d6a339_heap_oob_write_read_2004_compressed_section.dwg"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/LibreDWG/libredwg/commit/8f03865f37f5d4ffd616fef802acc980be54d300"
        },
        {
          "tags": [
            "broken-link",
            "product"
          ],
          "url": "https://www.gnu.org/"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-26T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-05-26T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-05-26T18:20:07.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-9605",
    "datePublished": "2026-05-26T23:15:20.385Z",
    "dateReserved": "2026-05-26T16:14:39.515Z",
    "dateUpdated": "2026-05-28T13:52:18.548Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

OPENSUSE-SU-2026:10879-1

CVE-2026-9501 (GCVE-0-2026-9501)

CVE-2026-9503 (GCVE-0-2026-9503)

CVE-2026-9504 (GCVE-0-2026-9504)

CVE-2026-9605 (GCVE-0-2026-9605)

Tags

Sightings

Nomenclature

Related by attack behaviour