The vulnerability lies in the AcDs decoder function, where a global out‑of‑bounds read can occur when the software processes a DWG file containing an unusually large 'schdat' property type value. The unchecked index allows the decoder to read data beyond the bounds of a static table, which may expose memory contents or cause a crash. The vulnerability can thus lead to either unintended disclosure of internal memory or to a denial of service condition by terminating the application that performed the read. Based on the description, it is inferred that the attack requires the attacker to supply a crafted DWG file, which suggests a local or file‑based vector rather than a remote network exploit.

The flaw affects all versions of the GNU LibreDWG library up to and including 0.14.8612. Any application that incorporates this library—such as dwgread, dwg2dxf, or other DWG‑processing tools—could be impacted. The issue is tied to the library itself, so any downstream software that does not provide additional bounds checking when loading DWG files is also at risk.

The CVSS score of 6.9 places the issue in the medium severity range, and a very low EPSS score of less than 1% indicates that exploitation is unlikely at the present moment. The vulnerability is not currently listed in the CISA KEV catalog, suggesting that no large‑scale, publicly known exploits are in circulation. Nevertheless, an attacker who can supply a malicious DWG file—whether through a local user, a compromised document repository, or an application that opens user‑supplied files—could trigger the out‑of‑bounds read to cause a crash or potentially leak memory contents. The absence of a network‑based attack vector reduces the immediacy of threat, but the possibility of denial of service remains a concern for any environment that processes DWG files from untrusted sources.