High severity7.8NVD Advisory· Published Nov 11, 2026· Updated Nov 11, 2026
CVE-2026-126497
CVE-2026-126497
Description
LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw dwgReader18::parseDataPage() function due to unchecked buffer size and page offsets. Attackers can craft an AC1018 (R2004) DWG file with malicious startOffset values that cause decompress18 to write past the heap buffer when opened, causing crashes and potential code execution.
Affected products
1Patches
Vulnerability mechanics
References
4- github.com/LibreCAD/LibreCAD/blob/v2.2.1.6/libraries/libdxfrw/src/intern/dwgreader18.cppnvd
- github.com/LibreCAD/LibreCAD/commit/17ba2b273b89cc9c8b6fcf71882e327ccf1eebf6nvd
- github.com/LibreCAD/LibreCAD/issues/3256nvd
- www.vulncheck.com/advisories/librecad-through-2.2.1.6-heap-out-of-bounds-write-via-dwgreader18-parsedatapagenvd
News mentions
0No linked articles in our index yet.