Executive brief
GNU LibreDWG is a library used for reading and writing DWG files, which are standard files for computer-aided design (CAD) software. A security flaw in its 'dwggrep' utility could allow a local user to crash the application by providing a specially crafted DWG file. This results in a denial-of-service, potentially disrupting CAD workflows or automated file processing tasks.
Technical details
A null pointer dereference exists in the match_BLOCK_HEADER function within dwggrep.c of the GNU LibreDWG Dwggrep Utility. The vulnerability is triggered when the utility processes a malformed DWG file, leading to a segmentation fault (NULL pointer read access at address 0x0). An attacker with local access can exploit this to cause the application to crash. The issue was identified in the main branch at commit 6d6a339 and affects versions up to 0.14. Public exploit code in the form of a proof-of-concept DWG file has been released.
Affected products
- GNU LibreDWG up to 0.14
Timeline
- 2026-04-10: other: Vulnerability identified in commit 6d6a339
- 2026-05-26: disclosed: Vulnerability published via VulDB and NVD