top of page
perceptive_background_267k.jpg

A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c of the component Dwgbmp Utility. This ma…

Published:

26 May 2026 at 22:00:00

Alert date:

27 May 2026 at 15:06:57

Source:

nvd.nist.gov

Click to open the original link from this advisory

Supply Chain & Dependencies

A heap-based buffer overflow vulnerability has been discovered in GNU libredwg library up to version 0.13.4.8160. The flaw affects the bit_read_RC function in the bits.c file of the Dwgbmp Utility component. This vulnerability can be exploited remotely and a public exploit is available. The issue allows attackers to cause heap-based buffer overflow through manipulation of the affected function. A patch has been released with commit ID 8f03865f37f5d4ffd616fef802acc980be54d300 and applying this patch is the recommended remediation action.

Technical details

Mitigation steps:

Affected products:

GNU libredwg

Related links:

Related CVE's:

Related threat actors:

IOC's:

This article was created with the assistance of AI technology by Perceptive.

© 2025 by Perceptive Security. All rights reserved.

email: info@perceptivesecurity.com

Disclaimer: Deze website toont informatie afkomstig van externe bronnen. Perceptive aanvaardt geen verantwoordelijkheid voor de inhoud, juistheid of volledigheid van deze informatie.

bottom of page