GNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bitchainfree (called from dwgencodeMTEXT and dwgencodeadd_object).