This vulnerability affects GNU libredwg 0.13.4 in the DWG_TABLE function of src/dwg.spec related to Layer Encoding. A manipulation leads to a null pointer dereference due to two raw zeroing assignments that dereference a NULL material handle, introduced by a recent change. The FIELD_HANDLE macro is null-safe, but the fix restores the prior guard convention to prevent dereferencing NULL pointers. Exploitation requires local access and low privileges. The vulnerability is addressed by upgrading to version 0.14, which includes a patch restoring the null pointer guard.

Exploitation of this vulnerability can cause a null pointer dereference, likely resulting in a denial of service or application crash. The attack requires local access and low privileges, limiting remote exploitation. There is no indication of data disclosure or privilege escalation. The CVSS score of 4.8 reflects a medium severity impact primarily due to denial of service potential.

Upgrade GNU libredwg to version 0.14, which contains the official fix restoring the null pointer guard to prevent dereferencing NULL material handles. This upgrade fully mitigates the vulnerability. No additional mitigations are specified or required.