PT-2026-56793

CVE-2026-15184

Published

2026-04-29

Updated

2026-07-13

Description by

CVSS 3.1

3.3

Low

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions GNU LibreDWG versions prior to 0.14

Description A null pointer dereference occurs in the DWG File Handler component when the next obj argument is manipulated within the dwg next entity() function located in the src/dwg.c file. This issue requires the attack to be initiated from a local position.

Recommendations Update GNU LibreDWG to version 0.14.

Exploitability

Exploit

Fix

Impacts

Researchers

Ech06

Vendors

Affected products

Weakness enumeration

CWE-476: NULL Pointer Dereference

CWE-404: Improper Resource Shutdown or Release