PT-2026-43186 · Gnu · Libredwg

Pwn3Rd · Published 2026-05-26 · Updated 2026-05-26 · CVE-2026-9529

Mitre

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

A security flaw has been discovered in GNU LibreDWG up to 0.14. The affected element is the function match BLOCK HEADER of the file dwggrep.c of the component Dwggrep Utility. Performing a manipulation results in null pointer dereference. The attack requires a local approach. The exploit has been released to the public and may be used for attacks.

Exploit

Fix

NULL Pointer Dereference

Improper Resource Release

Weakness Enumeration

CWE-476

CWE-404

Related Identifiers

CVE-2026-9529

Affected Products

Libredwg

References · 6

• 🔥 https://github.com/HackC0der/CVE-Repos/blob/main/libredwg/libredwg_6d6a339_heap_oob_write_read_2004_compressed_section.dwg · Exploit
• https://gnu.org · Note
• https://vuldb.com/vuln/365548/cti · Note
• https://vuldb.com/submit/814273 · Note
• https://vuldb.com/vuln/365548 · Note
• https://github.com/LibreDWG/libredwg/issues/1247 · Note