PT-2026-25045 · Undefined · Undefined

Published 2026-03-12 · Updated 2026-03-13 · CVE-2025-61154

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions LibreDWG versions 0.13.3.7571 through 0.13.3.7835

Description A heap buffer overflow exists in LibreDWG. A specially crafted DWG file can lead to a Denial of Service (DoS) condition. The issue is located in the decompress R2004 section function within the decode.c file.

Recommendations LibreDWG versions 0.13.3.7571 through 0.13.3.7835 are affected and should be updated. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2025-61154

Affected Products

Undefined

References · 6

• https://osv.dev/vulnerability/CVE-2025-61154 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61154 · Security Note
• https://github.com/LibreDWG/libredwg/issues/1180 · Note
• https://twitter.com/VulmonFeeds/status/2032262693587959990 · Twitter Post
• https://davizin.com/cves/CVE-2025-61154.html · Note
• https://twitter.com/CVEnew/status/2032410978667958592 · Twitter Post