GNU Libredwg Heap-Based Buffer Overflow Vulnerability in Dwgbmp Utility

A heap-based buffer overflow vulnerability has been identified in GNU Libredwg versions through 0.13.4.8160. The issue arises in the Dwgbmp utility, specifically within the 'bit_read_RC' function of 'bits.c'. This vulnerability can be exploited remotely, leading to a heap-based buffer overflow.

Impact

Exploitation of this vulnerability causes a heap-buffer-overflow, which can lead to memory corruption and potentially allow for arbitrary code execution.

Reproduction

The vulnerability can be reproduced by processing a malformed DWG file with the 'dwgbmp' utility included in Libredwg. This can be done by compiling Libredwg with AFL++'s 'afl-clang-fast' as the compiler, and AddressSanitizer enabled, which will expose the heap-buffer-overflow error when the vulnerable 'bit_read_RC' function is called with the crafted DWG file.

Remediation

Users are advised to update to GNU Libredwg version 0.13.4.8200, where this vulnerability has been fixed.