CVE-2021-39525: GNU Libredwg

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue was discovered in libredwg through v0.10.1.3751. bit_read_fixed() in bits.c has a heap-based buffer overflow.

Affected products

• GNU Libredwg: up to and including 0.10.1.3751

Published 2021-09-20. Last modified 2026-06-17.