CVE-2026-9529
LOW3.3CVSS v3
1.7CVSS v2
0.01%
EPSS (exploit probability)
CWE-404CWE
Description
A security flaw has been discovered in GNU LibreDWG up to 0.14. The affected element is the function match_BLOCK_HEADER of the file dwggrep.c of the component Dwggrep Utility. Performing a manipulation results in null pointer dereference. The attack requires a local approach. The exploit has been released to the public and may be used for attacks.
CVSS v3 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Affected routers (0)
No routers currently mapped to this CVE in our database.