CVE-2026-9529
Fixed in a distro release EPSS <1%CVSS 3.3
A security flaw has been discovered in GNU LibreDWG up to 0.14. The affected element is the function match_BLOCK_HEADER of the file dwggrep.c of the component Dwggrep Utility. Performing a manipulation results in null pointer dereference. The attack requires a local approach. The exploit has been released to the public and may be used for attacks.
Products: gnu libredwg
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| openSUSE Leap 16.0 | libredwg | 0.14.8413-bp160.1.1 |
| openSUSE Tumbleweed | libredwg | 0.14.8413-1.1 |