CVE-2026-9605
High
Description
A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c of the component Dwgbmp Utility. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. Patch name: 8f03865f37f5d4ffd616fef802acc980be54d300. Applying a patch is the recommended action to fix this issue.
SeverityHigh
CVSS7.3
Exploit probability—
Product
Gnu Libredwg
PublishedMay 27, 2026
First seenMay 27, 2026
Weakness typeCWE-122CWE-122CWE-119Memory buffer bounds error
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gnu libredwg | 0.13.4.8160 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.