Description
A vulnerability has been found in GNU LibreDWG up to 0.13.4. The affected element is the function dwg_bmp of the file src/dwg.c of the component BMP Image Handler. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Upgrading to version 0.14 is sufficient to fix this issue. The name of the patch is 18fd542bb4d5ccedf9de12052bf50068b2b26f06. It is suggested to upgrade the affected component.
Published: 2026-07-09
Score: 4.8 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The flaw resides in the dwg_bmp function of the BMP image handler in GNU LibreDWG. A local attacker can supply a crafted BMP file that triggers a heap-based buffer overflow. The CVE description indicates that the exploit has been publicly disclosed and may be used, but it does not confirm whether it leads to code execution; the overflow could cause a crash or other unintended behavior. This weakness corresponds to CWE-119 and CWE-122.

Affected Systems

All installations of GNU LibreDWG 0.13.4 and earlier are affected. The issue is resolved in version 0.14, which incorporates patch commit 18fd542bb4d5ccedf9de12052bf50068b2b26f06.

Risk and Exploitability

The CVSS base score of 4.8 indicates a moderate impact. The EPSS score is less than 1%, implying a low probability of exploitation in the wild. The vulnerability is not listed in CISA’s KEV catalog. Because execution is local, the risk is limited to environments where a local attacker can provide crafted BMP files to a process that uses the vulnerable library. If exploited, the overflow could cause a crash or potentially allow further exploitation, but such additional effects are not confirmed by the CVE data.

Generated by OpenCVE AI on July 29, 2026 at 12:29 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade LibreDWG to version 0.14 or later to apply the official fix.
  • If upgrading is not immediately feasible, apply the patch commit 18fd542bb4d5ccedf9de12052bf50068b2b26f06 to the source code and rebuild the library.
  • Restrict BMP file parsing to trusted users or run the parsing process in a sandboxed environment to limit local exposure.

Generated by OpenCVE AI on July 29, 2026 at 12:29 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 09 Jul 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 09 Jul 2026 11:45:00 +0000

Type Values Removed Values Added
Description A vulnerability has been found in GNU LibreDWG up to 0.13.4. The affected element is the function dwg_bmp of the file src/dwg.c of the component BMP Image Handler. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. Upgrading to version 0.14 is sufficient to fix this issue. The name of the patch is 18fd542bb4d5ccedf9de12052bf50068b2b26f06. It is suggested to upgrade the affected component.
Title GNU LibreDWG BMP Image dwg.c dwg_bmp heap-based overflow
First Time appeared Gnu
Gnu libredwg
Weaknesses CWE-119
CWE-122
CPEs cpe:2.3:a:gnu:libredwg:*:*:*:*:*:*:*:*
Vendors & Products Gnu
Gnu libredwg
References
Metrics cvssV2_0

{'score': 4.3, 'vector': 'AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C'}

cvssV3_0

{'score': 5.3, 'vector': 'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}

cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'}

cvssV4_0

{'score': 4.8, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Gnu Libredwg
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-07-09T17:45:20.402Z

Reserved: 2026-07-09T04:56:52.789Z

Link: CVE-2026-15182

cve-icon Vulnrichment

Updated: 2026-07-09T17:44:43.015Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-29T12:30:03Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-122

    Heap-based Buffer Overflow