Executive brief
LibreDWG is an open-source library used for reading and writing DWG files, the native format for AutoCAD software. A security flaw in how the library handles specific compressed data sections allows a malicious actor to crash applications using the library by providing a specially crafted DWG file. This results in a denial-of-service, potentially disrupting workflows or automated systems that process CAD drawings.
Technical details
A heap-based buffer overflow (CWE-122) exists in LibreDWG within the 'decompress_R2004_section' function in 'decode.c'. The vulnerability is triggered when the library attempts to decompress R2004-format sections from a malformed DWG file, leading to an out-of-bounds memory write. An attacker can exploit this by inducing a user or automated system to open a specially crafted DWG file. Successful exploitation results in a segmentation fault and application crash (Denial of Service). The issue was identified via fuzzing and affects versions ranging from v0.13.3.7571 to v0.13.3.7835.
Affected products
- GNU LibreDWG v0.13.3.7571 - v0.13.3.7835
Timeline
- 2025-09-05: disclosed: Issue reported on GitHub repository
- 2026-03-12: advisory: CVE published by MITRE