CVE-2026-9529
Published
CVSS v3
3.3
LOW
CVSS v2
1.7
LOW
Affected
2
PROJECTS
Description
A security flaw has been discovered in GNU LibreDWG up to 0.14. The affected element is the function match_BLOCK_HEADER of the file dwggrep.c of the component Dwggrep Utility. Performing a manipulation results in null pointer dereference. The attack requires a local approach. The exploit has been released to the public and may be used for attacks.
Official mirror of libredwg. With CI hooks and nightly releases. PR's ok
GitHubGitHub