GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bfrread in decode.c.
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in copycompressedbytes in decoder2007.c.
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in bitsearchsentinel in bits.c.
GNU LibreDWG 0.9.3.2564 has an invalid pointer dereference in dwgdynapientityvalue in dynapi.c (dynapi.c is generated by gen-dynapi.pl).
GNU LibreDWG 0.9.3.2564 has a NULL pointer dereference in getnextownedentity in dwg.c.
GNU LibreDWG 0.9.3.2564 has a heap-based buffer over-read in readpagesmap in decoder2007.c.
GNU LibreDWG 0.9.3.2564 has an attempted excessive memory allocation in readsectionsmap in decoder2007.c.