CVE-2026-90622

Name of the Vulnerable Software and Affected Versions GNU libredwg version 0.13.4

Description A security flaw in the Layer Encoding component exists within the DWG TABLE() function of the src/dwg.spec file. A local manipulation can lead to a null pointer dereference, which occurs when raw zeroing assignments dereference a NULL material handle. This happens because the FIELD HANDLE macro is NULL-safe, but specific assignments added to disable LAYER.material bypassed the existing if ( obj->style) guard convention.

Recommendations Upgrade to version 0.14.