rpm package
opensuse/libredwg&distro=openSUSE Leap 16.0
pkg:rpm/opensuse/libredwg&distro=openSUSE%20Leap%2016.0
Vulnerabilities (8)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-15184 | Low | 3.3 | < 0.14.8413-bp160.1.1 | 0.14.8413-bp160.1.1 | Jul 9, 2026 | A vulnerability was found in GNU LibreDWG up to 0.13.4. The impacted element is the function dwg_next_entity of the file src/dwg.c of the component DWG File Handler. Performing a manipulation of the argument next_obj results in null pointer dereference. The attack must be initiat | |
| CVE-2026-9605 | Hig | 7.3 | < 0.14.8413-bp160.1.1 | 0.14.8413-bp160.1.1 | May 27, 2026 | A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c of the component Dwgbmp Utility. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been pu | |
| CVE-2026-9530 | Low | 3.3 | < 0.14.8413-bp160.1.1 | 0.14.8413-bp160.1.1 | May 26, 2026 | A weakness has been identified in GNU LibreDWG up to 0.14. The impacted element is the function read_2004_compressed_section of the file src/decode.c of the component Dwgbmp Utility. Executing a manipulation can lead to out-of-bounds read. The attack requires local access. The ex | |
| CVE-2026-9529 | Low | 3.3 | < 0.14.8413-bp160.1.1 | 0.14.8413-bp160.1.1 | May 26, 2026 | A security flaw has been discovered in GNU LibreDWG up to 0.14. The affected element is the function match_BLOCK_HEADER of the file dwggrep.c of the component Dwggrep Utility. Performing a manipulation results in null pointer dereference. The attack requires a local approach. The | |
| CVE-2026-9504 | Low | 3.3 | < 0.14.8413-bp160.1.1 | 0.14.8413-bp160.1.1 | May 25, 2026 | A weakness has been identified in GNU LibreDWG up to 0.14. Affected is the function bit_convert_TU of the file programs/dwggrep.c of the component Dwggrep Utility. This manipulation causes out-of-bounds read. The attack needs to be launched locally. The exploit has been made avai | |
| CVE-2026-9503 | Low | 3.3 | < 0.14.8413-bp160.1.1 | 0.14.8413-bp160.1.1 | May 25, 2026 | A security flaw has been discovered in GNU LibreDWG up to 0.14. This impacts the function dwg_next_entity of the file src/decode.c of the component DWG File Handler. The manipulation results in null pointer dereference. The attack must be initiated from a local position. The expl | |
| CVE-2026-9502 | Med | 5.3 | < 0.14.8413-bp160.1.1 | 0.14.8413-bp160.1.1 | May 25, 2026 | A vulnerability was identified in GNU LibreDWG up to 0.14. This affects the function decompress_R2004_section of the file src/decode.c of the component Dwgread Utility. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is pu | |
| CVE-2026-9501 | Low | 3.3 | < 0.14.8413-bp160.1.1 | 0.14.8413-bp160.1.1 | May 25, 2026 | A vulnerability was determined in GNU LibreDWG up to 0.14. The impacted element is the function decompress_R2004_section of the file src/decode.c of the component Dwgread Utility. Executing a manipulation can lead to reachable assertion. The attack is restricted to local executio |
- affected < 0.14.8413-bp160.1.1fixed 0.14.8413-bp160.1.1
A vulnerability was found in GNU LibreDWG up to 0.13.4. The impacted element is the function dwg_next_entity of the file src/dwg.c of the component DWG File Handler. Performing a manipulation of the argument next_obj results in null pointer dereference. The attack must be initiat
- affected < 0.14.8413-bp160.1.1fixed 0.14.8413-bp160.1.1
A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c of the component Dwgbmp Utility. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been pu
- affected < 0.14.8413-bp160.1.1fixed 0.14.8413-bp160.1.1
A weakness has been identified in GNU LibreDWG up to 0.14. The impacted element is the function read_2004_compressed_section of the file src/decode.c of the component Dwgbmp Utility. Executing a manipulation can lead to out-of-bounds read. The attack requires local access. The ex
- affected < 0.14.8413-bp160.1.1fixed 0.14.8413-bp160.1.1
A security flaw has been discovered in GNU LibreDWG up to 0.14. The affected element is the function match_BLOCK_HEADER of the file dwggrep.c of the component Dwggrep Utility. Performing a manipulation results in null pointer dereference. The attack requires a local approach. The
- affected < 0.14.8413-bp160.1.1fixed 0.14.8413-bp160.1.1
A weakness has been identified in GNU LibreDWG up to 0.14. Affected is the function bit_convert_TU of the file programs/dwggrep.c of the component Dwggrep Utility. This manipulation causes out-of-bounds read. The attack needs to be launched locally. The exploit has been made avai
- affected < 0.14.8413-bp160.1.1fixed 0.14.8413-bp160.1.1
A security flaw has been discovered in GNU LibreDWG up to 0.14. This impacts the function dwg_next_entity of the file src/decode.c of the component DWG File Handler. The manipulation results in null pointer dereference. The attack must be initiated from a local position. The expl
- affected < 0.14.8413-bp160.1.1fixed 0.14.8413-bp160.1.1
A vulnerability was identified in GNU LibreDWG up to 0.14. This affects the function decompress_R2004_section of the file src/decode.c of the component Dwgread Utility. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is pu
- affected < 0.14.8413-bp160.1.1fixed 0.14.8413-bp160.1.1
A vulnerability was determined in GNU LibreDWG up to 0.14. The impacted element is the function decompress_R2004_section of the file src/decode.c of the component Dwgread Utility. Executing a manipulation can lead to reachable assertion. The attack is restricted to local executio