CVE-2026-9501
Low · 3.3CVSS
3.3
EPSS
0.2%
Published
May 25, 2026
CISA due date
—
The record
A vulnerability was determined in GNU LibreDWG up to 0.14. The impacted element is the function decompress_R2004_section of the file src/decode.c of the component Dwgread Utility. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. This patch is called e501cb9926c1e9a07a0d1cc997f3e69e9be801c9. A patch should be applied to remediate this issue.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | libredwg | 0 | 0.13.4.8200-1.1 |
Related vulnerabilities
- CVE-2026-9605 A flaw has been found in GNU libredwg up to 0.13.4.8160. Also affects libredwg
- CVE-2026-9504 A weakness has been identified in GNU LibreDWG up to 0.14. Also affects libredwg
- CVE-2026-9503 A security flaw has been discovered in GNU LibreDWG up to 0.14. Also affects libredwg
- CVE-2026-105754 vLLM is an inference and serving engine for large language models. CWE-617
- CVE-2026-105753 vLLM is an inference and serving engine for large language models. CWE-617
- CVE-2026-98151 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix REG… CWE-617
- CVE-2026-84450 libheif is a HEIF and AVIF file format decoder and encoder. CWE-617
- CVE-2026-8674 Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN… CWE-617