Ech06

**Name of the Vulnerable Software and Affected Versions** GNU LibreDWG versions prior to 0.14 **Description** A heap-based buffer overflow occurs in the BMP Image Handler component within the `dwg bmp()` function located in the src/dwg.c file. This issue requires local access to be exploited. **Recommendations** Update to version 0.14. As a temporary mitigation, restrict the use of the `dwg bmp()` function.

**Name of the Vulnerable Software and Affected Versions** GNU LibreDWG versions prior to 0.14.8396 **Description** A heap-based buffer overflow occurs in the R2004 Section Decompression component within the `decompress R2004 section()` function located in the src/decode.c file. This issue can be triggered through local access by executing a specific manipulation. **Recommendations** Upgrade to version 0.14.8396.

**Name of the Vulnerable Software and Affected Versions** GNU LibreDWG versions prior to 0.14 **Description** A null pointer dereference occurs in the DWG File Handler component when the `next obj` argument is manipulated within the `dwg next entity()` function located in the src/dwg.c file. This issue requires the attack to be initiated from a local position. **Recommendations** Update GNU LibreDWG to version 0.14.