CVE-2021-45950: GNU Libredwg

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object).

Affected products

• GNU Libredwg: from 0.12.4.4313, up to and including 0.12.4.4367

Published 2022-01-01. Last modified 2026-06-17.