PT-2026-56793 · Gnu · Libredwg

Ech06 · Published 2026-07-09 · Updated 2026-07-09 · CVE-2026-15184

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.14

Description A null pointer dereference occurs in the DWG File Handler component when the next obj argument is manipulated within the dwg next entity() function located in the src/dwg.c file. This issue requires the attack to be initiated from a local position.

Recommendations Update GNU LibreDWG to version 0.14.

Exploit

Fix

NULL Pointer Dereference

Improper Resource Release

Weakness Enumeration

CWE-476

CWE-404

Related Identifiers

CVE-2026-15184

Affected Products

Libredwg

References · 12

• 🔥 https://github.com/HackC0der/CVE-Repos/blob/main/libredwg/libredwg_0b57303_dwggrep_segv_null_read_dwg_next_entity_dwg.c_1231.dwg · Exploit
• https://github.com/LibreDWG/libredwg/releases/tag/0.14 · Patch
• https://github.com/LibreDWG/libredwg/commit/dde45dac3c4d902e4d8fed150a8017b9732019c9 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-15184 · Security Note
• https://github.com/LibreDWG/libredwg/issues/1253 · Note
• https://vuldb.com/submit/851192 · Note
• https://vuldb.com/vuln/377110/cti · Note
• https://twitter.com/CVEnew/status/2075229344222310873 · Twitter Post
• https://twitter.com/infoflowcloud/status/2075230115672314200 · Twitter Post
• https://vuldb.com/vuln/377110 · Note
• https://vuldb.com/cve/CVE-2026-15184 · Note
• https://gnu.org · Note