{"id":"CVE-2026-9605","summary":"GNU libredwg Dwgbmp Utility bits.c bit_read_RC heap-based overflow","details":"A flaw has been found in GNU libredwg up to 0.13.4.8160. This issue affects the function bit_read_RC of the file bits.c of the component Dwgbmp Utility. This manipulation causes heap-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been published and may be used. Patch name: 8f03865f37f5d4ffd616fef802acc980be54d300. Applying a patch is the recommended action to fix this issue.","modified":"2026-11-09T07:01:54.705999720Z","published":"2026-05-26T23:15:20.385Z","related":["openSUSE-SU-2026:10879-1","openSUSE-SU-2026:21346-1"],"database_specific":{"cna_assigner":"VulDB","cwe_ids":["CWE-119","CWE-122"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/9xxx/CVE-2026-9605.json","unresolved_ranges":[{"extracted_events":[{"source":"AFFECTED_FIELD","strategy":"StandaloneSingleVersion","range":[{"introduced":"0.13.4.8160"},{"last_affected":"0.13.4.8160"}]}]},{"extracted_events":[{"range":[{"last_affected":"0.13.4.8160"}],"source":"DESCRIPTION"}]}]},"references":[{"type":"WEB","url":"https://www.gnu.org/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/9xxx/CVE-2026-9605.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-9605"},{"type":"ADVISORY","url":"https://vuldb.com/submit/818197"},{"type":"ADVISORY","url":"https://vuldb.com/vuln/365678"},{"type":"REPORT","url":"https://github.com/LibreDWG/libredwg/issues/1248"},{"type":"REPORT","url":"https://vuldb.com/vuln/365678/cti"},{"type":"FIX","url":"https://github.com/LibreDWG/libredwg/commit/8f03865f37f5d4ffd616fef802acc980be54d300"},{"type":"EVIDENCE","url":"https://github.com/HackC0der/CVE-Repos/blob/main/libredwg/libredwg_6d6a339_heap_oob_write_read_2004_compressed_section.dwg"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/libredwg/libredwg","events":[{"introduced":"0"},{"fixed":"8f03865f37f5d4ffd616fef802acc980be54d300"}],"database_specific":{"extracted_events":[{"range":[{"fixed":"8f03865f37f5d4ffd616fef802acc980be54d300"}],"source":"REFERENCES_COMMIT"}]}}],"versions":["0.13.4.8043","0.13.4.8036","0.13.4.8028","0.13.4.8018","0.13.4.8014","0.13.4.8001","0.13.4.7998","0.13.4.7985","0.13.4.7976","0.13.4.7974","0.13.4.7969","0.13.4","0.13.3.7819","0.13.3.7816","0.13.3.7813","0.13.3.7812","0.13.3.7810","0.13.3.7808","0.13.3.7805","0.13.3.7802","0.13.3.7797","0.13.3.7794","0.13.3.7792","0.13.3.7789","0.13.3.7778","0.13.3.7776","0.13.3.7772","0.13.3.7763","0.13.3.7761","0.13.3.7752","0.13.3.7743","0.13.3.7741","0.13.3.7737","0.13.3.7730","0.13.3.7727","0.13.3.7721","0.13.3.7715","0.13.3.7702","0.13.3.7696","0.13.3.7690","0.13.3.7686","0.13.3.7685","0.13.3.7680","0.13.3.7675","0.13.3.7665","0.13.3.7663","0.13.3.7657","0.13.3.7650","0.13.3.7649","0.13.3.7646","0.13.3.7640","0.13.3.7637","0.13.3.7635","0.13.3.7603","0.13.3.7600","0.13.3.7599","0.13.3.7582","0.13.3.7577","0.13.3.7574","0.13.3.7571","0.13.3.7562","0.13.3.7558","0.13.3.7557","0.13.3.7554","0.13.3.7552","0.13.3.7551","0.13.3.7545","0.13.3.7539","0.13.3.7535","0.13.3.7534","0.13.3.7533","0.13.3.7516","0.13.3.7507","0.13.3.7501","0.13.3.7491","0.13.3.7483","0.13.3.7473","0.13.3.7472","0.13.3.7469","0.13.3.7466","0.13.3.7460","0.13.3.7456","0.13.3.7453","0.13.3.7445","0.13.3.7442","0.13.3.7437","0.13.3.7434","0.13.3.7431","0.13.3.7429","0.13.3.7426","0.13.3.7424","0.13.3.7420","0.13.3.7414","0.13.3.7412","0.13.3.7411","0.13.3.7409","0.13.3.7405","0.13.3.7385","0.13.3.7377","0.13.3.7371","0.13.3.7351","0.13.3.7345","0.13.3.7344","0.13.3.7341","0.13.3.7338","0.13.3.7327","0.13.3.7324","0.13.3.7320","0.13.3.7308","0.13.3.7306","0.13.3.7298","0.13.3.7273","0.13.3.7270","0.13.3.7268","0.13.3.7265","0.13.3.7264","0.13.3.7262","0.13.3.7259","0.13.3.7257","0.13.3.7251","0.13.3.7246","0.13.3.7240","0.13.3.7233","0.13.3.7227","0.13.3.7226","0.13.3.7225","0.13.3.7224","0.13.3.7223","0.13.3.7220","0.13.3.7217","0.13.3.7199","0.13.3.7190","0.13.3.7187","0.13.3.7186","0.13.3.7183","0.13.3.7176","0.13.3.7168","0.13.3.7166","0.13.3.7165","0.13.3.7163","0.13.3","0.13.2","0.13.1","0.13","0.12.5","0.12.4","0.12.3","0.12.2","0.12.1","0.12","0.11.1","0.11","0.10.1","0.10","0.9.3","0.9.2","0.9.1","0.9","0.8","0.7","0.6.2","0.6.1","0.6","0.5","0.4.938","0.4.924","0.4.900","0.4-dev","0.3"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-9605.json","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["35898828282133341884944571437441208822","111016291822501941201427952486376382974","204719403551589907799524301486078655452","321084837797370834700554236567059949717","82945914742827335401873043836341138986"],"threshold":0.9},"id":"CVE-2026-9605-d5770181","signature_type":"Line","signature_version":"v1","source":"https://github.com/libredwg/libredwg/commit/8f03865f37f5d4ffd616fef802acc980be54d300","target":{"file":"src/decode.c"}},{"digest":{"function_hash":"331313396876041992446712856981242496851","length":6190},"id":"CVE-2026-9605-e9195089","signature_type":"Function","signature_version":"v1","source":"https://github.com/libredwg/libredwg/commit/8f03865f37f5d4ffd616fef802acc980be54d300","target":{"file":"src/decode.c","function":"read_2004_compressed_section"},"deprecated":false}],"vanir_signatures_modified":"2026-11-09T07:01:54Z"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}]}