CVE-2026-62254

    Dashboard / Vulnerabilities / CVE-2026-62254

    CVE-2026-62254

    Published: 30 Oct 2026Last Modified: 4 Nov 2026

    Summary: LibreDWG: excessive class-decoding reallocation in R13-R2000 DWG parsing

    Details: LibreDWG is a free C library to read and write DWG files. Prior to 0.14, a specially crafted R13-R2000 DWG can trigger algorithmic resource exhaustion in `decode_R13_R2000` in `src/decode.c`. The class-decoding loop performs `realloc` on every iteration without a sanity check on `num_classes`. Manipulating that field forces an extremely slow allocation loop and denial of service when the file is parsed. Running the parser in a sandbox with memory limits is a workaround rather than a remediation. This issue is fixed in version 0.14.

    References: https://github.com/LibreDWG/libredwg/releases/tag/0.14, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/62xxx/CVE-2026-62254.json, https://github.com/LibreDWG/libredwg/security/advisories/GHSA-gp83-hcvh-g255, https://nvd.nist.gov/vuln/detail/CVE-2026-62254, https://github.com/LibreDWG/libredwg/issues/1261, https://github.com/LibreDWG/libredwg/commit/9de893a2e395ff5ac104a46cca54c5e2cf8f02cf

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -d9468ae948b8f07a08efa756c19f8916052358c0

    Affected versions

    0.13.4.8043
    0.13.4.8036
    0.13.4.8028
    0.13.4.8018
    0.13.4.8014
    0.13.4.8001
    0.13.4.7998
    0.13.4.7985
    0.13.4.7976
    0.13.4.7974
    0.13.4.7969
    0.13.4
    0.13.3.7819
    0.13.3.7816
    0.13.3.7813
    0.13.3.7812
    0.13.3.7810
    0.13.3.7808
    0.13.3.7805
    0.13.3.7802
    0.13.3.7797
    0.13.3.7794
    0.13.3.7792
    0.13.3.7789
    0.13.3.7778
    0.13.3.7776
    0.13.3.7772
    0.13.3.7763
    0.13.3.7761
    0.13.3.7752
    0.13.3.7743
    0.13.3.7741
    0.13.3.7737
    0.13.3.7730
    0.13.3.7727
    0.13.3.7721
    0.13.3.7715
    0.13.3.7702
    0.13.3.7696
    0.13.3.7690
    0.13.3.7686
    0.13.3.7685
    0.13.3.7680
    0.13.3.7675
    0.13.3.7665
    0.13.3.7663
    0.13.3.7657
    0.13.3.7650
    0.13.3.7649
    0.13.3.7646
    0.13.3.7640
    0.13.3.7637
    0.13.3.7635
    0.13.3.7603
    0.13.3.7600
    0.13.3.7599
    0.13.3.7582
    0.13.3.7577
    0.13.3.7574
    0.13.3.7571
    0.13.3.7562
    0.13.3.7558
    0.13.3.7557
    0.13.3.7554
    0.13.3.7552
    0.13.3.7551
    0.13.3.7545
    0.13.3.7539
    0.13.3.7535
    0.13.3.7534
    0.13.3.7533
    0.13.3.7516
    0.13.3.7507
    0.13.3.7501
    0.13.3.7491
    0.13.3.7483
    0.13.3.7473
    0.13.3.7472
    0.13.3.7469
    0.13.3.7466
    0.13.3.7460
    0.13.3.7456
    0.13.3.7453
    0.13.3.7445
    0.13.3.7442
    0.13.3.7437
    0.13.3.7434
    0.13.3.7431
    0.13.3.7429
    0.13.3.7426
    0.13.3.7424
    0.13.3.7420
    0.13.3.7414
    0.13.3.7412
    0.13.3.7411
    0.13.3.7409
    0.13.3.7405
    0.13.3.7385
    0.13.3.7377
    0.13.3.7371
    0.13.3.7351
    0.13.3.7345
    0.13.3.7344
    0.13.3.7341
    0.13.3.7338
    0.13.3.7327
    0.13.3.7324
    0.13.3.7320
    0.13.3.7308
    0.13.3.7306
    0.13.3.7298
    0.13.3.7273
    0.13.3.7270
    0.13.3.7268
    0.13.3.7265
    0.13.3.7264
    0.13.3.7262
    0.13.3.7259
    0.13.3.7257
    0.13.3.7251
    0.13.3.7246
    0.13.3.7240
    0.13.3.7233
    0.13.3.7227
    0.13.3.7226
    0.13.3.7225
    0.13.3.7224
    0.13.3.7223
    0.13.3.7220
    0.13.3.7217
    0.13.3.7199
    0.13.3.7190
    0.13.3.7187
    0.13.3.7186
    0.13.3.7183
    0.13.3.7176
    0.13.3.7168
    0.13.3.7166
    0.13.3.7165
    0.13.3.7163
    0.13.3
    0.13.2
    0.13.1
    0.13

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-62254 | CVE-DB