CVE-2026-15182 | GNU LibreDWG up to 0.13.4 BMP Image src/dwg.c dwg_bmp heap-based overflow (Issue 1252 / EUVD-2026-42580)

A vulnerability was found in GNU LibreDWG up to 0.13.4 and classified as critical. The affected element is the function dwg_bmp of the file src/dwg.c of the component BMP Image Handler. Such manipulation leads to heap-based buffer overflow. This vulnerability is listed as CVE-2026-15182. The attack must be carried out locally. In addition, an exploit is available. It is suggested to upgrade the affected component.