CVE-2026-9529— GNU LibreDWG Dwggrep Utility dwggrep.c match_BLOCK_HEADER null pointer dereference
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-9529
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
GNU LibreDWG Dwggrep Utility dwggrep.c match_BLOCK_HEADER null pointer dereference
Source: NVD (National Vulnerability Database)
Vulnerability Description
A security flaw has been discovered in GNU LibreDWG up to 0.14. The affected element is the function match_BLOCK_HEADER of the file dwggrep.c of the component Dwggrep Utility. Performing a manipulation results in null pointer dereference. The attack requires a local approach. The exploit has been released to the public and may be used for attacks.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
空指针解引用
Source: NVD (National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-9529
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-9529
请登录查看更多情报信息。
Proof of Concept for CVE-2026-9529 (1)
Vendor Pages for CVE-2026-9529 (1)
Other References for CVE-2026-9529 (1)
Same Patch Batch · GNU · 2026-05-26 · 3 CVEs total
| CVE-2026-9605 | 7.3 HIGH | GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow |
| CVE-2026-9530 | 3.3 LOW | GNU LibreDWG Dwgbmp Utility decode.c read_2004_compressed_section out-of-bounds |
IV. Related Vulnerabilities
Same product: LibreDWG
- CVE-2026-9605
GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based ov - CVE-2026-9530
GNU LibreDWG Dwgbmp Utility decode.c read_2004_compressed_se - CVE-2026-9504
GNU LibreDWG Dwggrep Utility dwggrep.c bit_convert_TU out-of - CVE-2026-9503
GNU LibreDWG DWG File decode.c dwg_next_entity null pointer - CVE-2026-9502
GNU LibreDWG Dwgread Utility decode.c decompress_R2004_secti
Same vendor: GNU
- CVE-2026-9605
GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based ov - CVE-2026-9530
GNU LibreDWG Dwgbmp Utility decode.c read_2004_compressed_se - CVE-2026-9504
GNU LibreDWG Dwggrep Utility dwggrep.c bit_convert_TU out-of - CVE-2026-9503
GNU LibreDWG DWG File decode.c dwg_next_entity null pointer - CVE-2026-9502
GNU LibreDWG Dwgread Utility decode.c decompress_R2004_secti
Same weakness: CWE-476
- CVE-2026-9567
GPAC MP4Box isom_intern.c MergeFragment null pointer derefer - CVE-2026-7450
PAR File Parsing NULL Pointer Dereference in Autodesk 3ds Ma - CVE-2026-8850
IBM HTTP Server is affected by multiple vulnerabilities - CVE-2026-8479
IEC 60870-5-104空指针解引用导致DoS - CVE-2026-9503
GNU LibreDWG DWG File decode.c dwg_next_entity null pointer
V. Comments for CVE-2026-9529
No comments yet