Medium severity5.5NVD Advisory· Published Jan 2, 2024· Updated Jun 17, 2026
CVE-2023-26157
CVE-2023-26157
Description
Versions of the package libredwg before 0.12.5.6384 are vulnerable to Denial of Service (DoS) due to an out-of-bounds read involving section->num_pages in decode_r2007.c.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- osv-coords3 versionspkg:rpm/opensuse/libredwg&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/libredwg&distro=openSUSE%20Tumbleweedpkg:rpm/suse/libredwg&distro=SUSE%20Package%20Hub%2015%20SP5
< 0.12.5.6924-bp155.3.6.1+ 2 more
- (no CPE)range: < 0.12.5.6924-bp155.3.6.1
- (no CPE)range: < 0.12.5.6924-1.1
- (no CPE)range: < 0.12.5.6924-bp155.3.6.1
Patches
Vulnerability mechanics
References
3- github.com/LibreDWG/libredwg/commit/c8cf03ce4c2315b146caf582ea061c0460193bccnvdPatch
- github.com/LibreDWG/libredwg/issues/850nvdExploitIssue TrackingPatch
- security.snyk.io/vuln/SNYK-UNMANAGED-LIBREDWG-6070730nvdThird Party Advisory
News mentions
0No linked articles in our index yet.