CVE search · CVE-2025-61154
CVE-2025-61154
medium 6.5
Heap buffer overflow vulnerability in LibreDWG versions v0.13.3.7571 up to v0.13.3.7835 allows a crafted DWG file to cause a Denial of Service (DoS) via the function decompress_R2004_section at decode.c.
Details
- Status
- Analyzed
- Published
- Last changed
- Source
- cve@mitre.org
- Weakness
- CWE-122
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | medium 6.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- gnu · libredwg
References
- https://davizin.com/cves/CVE-2025-61154.htmlThird Party Advisory
- https://github.com/LibreDWG/libredwg/issues/1180Issue Tracking