CVE-2026-15520mediumCWE-119CWE-122

CVE-2026-15520: fallo de gravedad media en GNU LibreDWG

GNU LibreDWG R2004 Section Decompression decode.c decompress_R2004_section heap-based overflow

Publicada el

Seguir esta CVE+ Monitorear LibreDWG

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

33Vexday Risk Score

Sin señal de explotación. Ella tiene prueba de concepto pública.

ssvc Attendcvss 4.8epss 0.2%
A vulnerability was determined in GNU LibreDWG 0.13.4-154-g0b573035. This impacts the function decompress_R2004_section of the file src/decode.c of the component R2004 Section Decompression. Executing a manipulation can lead to heap-based buffer overflow. The attack requires local access. The exploit has been publicly disclosed and may be utilized. Upgrading to version 0.14.8396 will fix this issue. This patch is called 3d0f9fc2eddbd6579c99af3111c37c98f03475d0. You should upgrade the affected component.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
GNU · LibreDWG
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — GNU LibreDWG

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-15182MEDIUMGNU LibreDWG BMP Image dwg.c dwg_bmp heap-based overflowEPSS 0.2%CVE-2026-9504MEDIUMGNU LibreDWG Dwggrep Utility dwggrep.c bit_convert_TU out-of-boundsEPSS 0.2%CVE-2026-15184MEDIUMGNU LibreDWG DWG File dwg.c dwg_next_entity null pointer dereferenceEPSS 0.2%CVE-2026-9502MEDIUMGNU LibreDWG Dwgread Utility decode.c decompress_R2004_section heap-based overflowEPSS 0.2%CVE-2026-9501MEDIUMGNU LibreDWG Dwgread Utility decode.c decompress_R2004_section assertionEPSS 0.2%CVE-2026-9530MEDIUMGNU LibreDWG Dwgbmp Utility decode.c read_2004_compressed_section out-of-boundsEPSS 0.1%