Out-of-Bounds Read Vulnerability in GNU LibreDWG
CVE-2026-111167
6.9MEDIUM
What is CVE-2026-111167?
GNU LibreDWG versions up to 0.14.8612 are susceptible to a global out-of-bounds read vulnerability located in the AcDs decoder function, acds_private(). This vulnerability arises from a flaw that permits attackers to read beyond a static data table by exploiting an unchecked schema property type index. By crafting a malicious R2004 or R2010+ DWG file with an unusually large 'schdat' property type value, an attacker can induce a crash in applications such as dwgread and dwg2dxf that rely on LibreDWG for processing. This issue poses a significant risk, allowing for potential service disruption and exploitation.
Affected Version(s)
LibreDWG 0 <= 0.14.8612
References
CVSS V4
Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown
Timeline
Vulnerability published
Vulnerability Reserved
Credit
HaiND from the Post and Telecommunication Institute of Technology