CVE-2018-14471

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.5.1048

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and SEGV, via a crafted dwg file. This is due to a problem in the dwg obj block control get block headers function in dwg api.c.

Recommendations For GNU LibreDWG version 0.5.1048, as a temporary workaround, consider restricting the use of the dwg obj block control get block headers function until a patch is available. Avoid using this function with untrusted dwg files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.