CVE-2026-15182 | GNU LibreDWG up to 0.13.4 BMP Image src/dwg.c dwg_bmp heap-based overflow (Issue 1252)

A vulnerability was found in GNU LibreDWG up to 0.13.4 and classified as critical. The affected element is the function dwg_bmp of the file src/dwg.c of the component BMP Image Handler. Such manipulation leads to heap-based buffer overflow.

This vulnerability is listed as CVE-2026-15182. The attack must be carried out locally. In addition, an exploit is available.

It is suggested to upgrade the affected component.