CVE-2025-61154

Published March 12th, 2026

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

Heap buffer overflow vulnerability in LibreDWG versions v0.13.3.7571 up to v0.13.3.7835 allows a crafted DWG file to cause a Denial of Service (DoS) via the function decompress_R2004_section at decode.c.

LibreDWG/libredwg

Official mirror of libredwg. With CI hooks and nightly releases. PR's ok

GitHub

1.43K