| शीर्षक | GNU libredwg 0.13.4.8229 (git 9b4adcbf, 2026-06-01) NULL Pointer Dereference |
|---|
| विवरण | libredwg 0.13.4.8229 is affected by SEGV when executing function dwg_encode_LAYER_private . This may result in remote code execution.dwg_encode_LAYER_private dereferences the LAYER material handle
(Dwg_Object_Ref *) without a NULL check when encoding to an R_2007a+
target version. On a malformed R2007 input whose LAYER objects decode with a
NULL material, this is a write through a NULL pointer (0x0 + offsetof absolute_ref), causing a SEGV (AddressSanitizer reports a WRITE to address
0x20). UndefinedBehaviorSanitizer independently flags it as member access within null pointer of type 'Dwg_Object_Ref'.
The crash is reached on the standard decode → encode round-trip, e.g. via the
in-tree examples/dwgfuzz -rw harness, or via the public
dwg_read_file + dwg_write_file API (minimal reproducer below). |
|---|
| स्रोत | ⚠️ https://github.com/LibreDWG/libredwg/issues/1269 |
|---|
| उपयोगकर्ता | lcyf-fizz (UID 82520) |
|---|
| सबमिशन | 04/08/2026 08:59 AM (1 महीना पहले) |
|---|
| संयम | 12/09/2026 10:27 PM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 403204 [GNU libredwg 0.13.4 Layer Encoding src/dwg.spec DWG_TABLE सेवा अस्वीकार] |
|---|
| अंक | 20 |
|---|