CVE-2026-9500

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.14

Description A heap-based buffer overflow occurs in the read 2004 compressed section() function within the src/decode.c file of the Dwgread Utility component. This issue can be triggered through local access and may lead to a denial of service.

Recommendations Update to version 0.14 or later. As a temporary workaround, restrict local access to the Dwgread Utility component to minimize the risk of exploitation.