CVE-2026-62254 Details
Description
LibreDWG is a free C library to read and write DWG files. Prior to 0.14, a specially crafted R13-R2000 DWG can trigger algorithmic resource exhaustion in `decode_R13_R2000` in `src/decode.c`. The class-decoding loop performs `realloc` on every iteration without a sanity check on `num_classes`. Manipulating that field forces an extremely slow allocation loop and denial of service when the file is parsed. Running the parser in a sandbox with memory limits is a workaround rather than a remediation. This issue is fixed in version 0.14.
A denial-of-service vulnerability has been identified in LibreDWG versions prior to 0.14. The issue arises in the 'decode_R13_R2000' function within 'src/decode.c', where the class-decoding loop improperly handles the 'num_classes' field. This flaw allows a crafted R13-R2000 DWG file to manipulate the decoding process, causing an algorithmic resource exhaustion by triggering an unbounded memory allocation loop. The vulnerability requires user interaction to exploit, as it involves parsing specially designed DWG files.
Users can upgrade to LibreDWG version 0.14 or later, where this vulnerability has been fixed. Instructions for downloading the latest version are available on the LibreDWG GitHub releases page.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 30, 2026CISA-ADP
Assessed Oct 30, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/LibreDWG/libredwg/commit/9de893a2e395ff5ac104a46cca54c5e2cf8f02cf | [email protected] | Source CodeVendor |
| https://github.com/LibreDWG/libredwg/issues/1261 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/LibreDWG/libredwg/releases/tag/0.14 | [email protected] | Release NotesVendor |
| https://github.com/LibreDWG/libredwg/security/advisories/GHSA-gp83-hcvh-g255 | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-400 | Uncontrolled Resource Consumption | [email protected] |
| CWE-789 | Memory Allocation with Excessive Size Value | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| LibreDWG | < 0.14 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 30, 2026 | CVE Modified | CISA-ADP |
| Oct 30, 2026 | New CVE Received | [email protected] |