CVE-2026-90622 | GNU libredwg 0.13.4 Layer Encoding src/dwg.spec DWG_TABLE null pointer dereference (Issue 1269)

September 12, 2026 Yanac

A vulnerability has been found in GNU libredwg 0.13.4 and classified as problematic. This impacts the function DWG_TABLE of the file src/dwg.spec of the component Layer Encoding. Performing a manipulation results in null pointer dereference.

This vulnerability was named CVE-2026-90622. The attack needs to be approached locally. In addition, an exploit is available.

The affected component should be upgraded.

The FIELD_HANDLE macro itself is NULL-safe (emits null_handle) – only the two raw zeroing assignments added by 27118c40 (“encode: also disable LAYER.material”) dereferenced a NULL material handle; the fix restores the file’s existing if (_obj->style) guard convention for material.VulDB Recent EntriesRead More