CVE Tools
Track your stack

Libredwg

104 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Libredwg, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Libredwg CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Libredwg CVEs per month
MonthCVEs
2024-120
2025-010
2025-020
2025-030
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-031
2026-040
2026-058
2026-060
2026-073
2026-080
2026-091
2026-104
2026-110

Severity

How the 104 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical55%
  • High6159%
  • Medium3029%
  • Low88%

Latest CVEs

The 15 most recently published vulnerabilities affecting Libredwg.

  1. CVE-2026-54610LibreDWG: const-input mutation and crash in bit_TV_to_utf8 error handling3.3
  2. CVE-2026-62250LibreDWG: unbounded allocation in pre-R13 DWG entity decoding5.5
  3. CVE-2026-62254LibreDWG: excessive class-decoding reallocation in R13-R2000 DWG parsing5.5
  4. CVE-2026-111167GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs Decoder6.1
  5. CVE-2026-90622GNU libredwg Layer Encoding dwg.spec DWG_TABLE null pointer dereference3.3
  6. CVE-2026-15520GNU LibreDWG R2004 Section Decompression decode.c decompress_R2004_section heap-based overflow5.3
  7. CVE-2026-15184GNU LibreDWG DWG File dwg.c dwg_next_entity null pointer dereference3.3
  8. CVE-2026-15182GNU LibreDWG BMP Image dwg.c dwg_bmp heap-based overflow5.3
  9. CVE-2026-9605GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow7.3
  10. CVE-2026-9530GNU LibreDWG Dwgbmp Utility decode.c read_2004_compressed_section out-of-bounds3.3
  11. CVE-2026-9529GNU LibreDWG Dwggrep Utility dwggrep.c match_BLOCK_HEADER null pointer dereference3.3
  12. CVE-2026-9504GNU LibreDWG Dwggrep Utility dwggrep.c bit_convert_TU out-of-bounds3.3
  13. CVE-2026-9503GNU LibreDWG DWG File decode.c dwg_next_entity null pointer dereference3.3
  14. CVE-2026-9502GNU LibreDWG Dwgread Utility decode.c decompress_R2004_section heap-based overflow5.3
  15. CVE-2026-9501GNU LibreDWG Dwgread Utility decode.c decompress_R2004_section assertion3.3

Product grouping is registry-driven, with AI assist and human review. How it works