CVE-2026-9504

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.15

Description A weakness in the Dwggrep Utility component allows an out-of-bounds read, which occurs when the system accesses memory outside the intended boundary of a buffer. This issue is located in the bit convert TU() function within the programs/dwggrep.c file. A local attacker can exploit this to cause a denial of service.

Recommendations Apply patch be996bf2178a40e98720f18c2414815d244413db. As a temporary workaround, restrict the use of the bit convert TU() function.