CVE-2026-15184mediumCWE-404CWE-476

CVE-2026-15184: falha de média gravidade em GNU LibreDWG

GNU LibreDWG DWG File dwg.c dwg_next_entity null pointer dereference

Publicada em

Seguir esta CVE+ Monitorar LibreDWG

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

33Vexday Risk Score

Sem sinal de exploração. Ela tem prova de conceito pública.

ssvc Attendcvss 4.8epss 0.2%
A vulnerability was found in GNU LibreDWG up to 0.13.4. The impacted element is the function dwg_next_entity of the file src/dwg.c of the component DWG File Handler. Performing a manipulation of the argument next_obj results in null pointer dereference. The attack must be initiated from a local position. The exploit has been made public and could be used. Upgrading to version 0.14 is sufficient to resolve this issue. The patch is named dde45dac3c4d902e4d8fed150a8017b9732019c9. Upgrading the affected component is recommended. Different than CVE-2026-9503.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
GNU · LibreDWG
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — GNU LibreDWG

No mesmo produto, das mais perigosas para as menos.

CVE-2026-15520MEDIUMGNU LibreDWG R2004 Section Decompression decode.c decompress_R2004_section heap-based overflowEPSS 0.2%CVE-2026-15182MEDIUMGNU LibreDWG BMP Image dwg.c dwg_bmp heap-based overflowEPSS 0.2%CVE-2026-9504MEDIUMGNU LibreDWG Dwggrep Utility dwggrep.c bit_convert_TU out-of-boundsEPSS 0.2%CVE-2026-9502MEDIUMGNU LibreDWG Dwgread Utility decode.c decompress_R2004_section heap-based overflowEPSS 0.2%CVE-2026-9501MEDIUMGNU LibreDWG Dwgread Utility decode.c decompress_R2004_section assertionEPSS 0.2%CVE-2026-9530MEDIUMGNU LibreDWG Dwgbmp Utility decode.c read_2004_compressed_section out-of-boundsEPSS 0.1%