Heap-Based Out-of-Bounds Write Vulnerability in LibreCAD by LibreCAD

CVE-2026-126497

What is CVE-2026-126497?

LibreCAD versions up to 2.2.1.6 are susceptible to a heap-based out-of-bounds write vulnerability within the libdxfrw library. This issue arises from inadequate control over buffer size and page offsets in the dwgReader18::parseDataPage() function. Attackers can exploit this vulnerability by crafting specially designed AC1018 (R2004) DWG files with malicious startOffset values. When such files are opened, the decompress18 function may write past the allocated heap buffer, leading to application crashes and enabling potential arbitrary code execution.

References