CVE-2026-111167

GNU LibreDWG through 0.14.8612 contains a global out-of-bounds read vulnerability in the AcDs decoder acdsprivate that allows attackers to read beyond a static table via an unchecked schema property type index. Attackers can supply a crafted R2004 or R2010+ DWG file with a large 'schdat' property...

CVE-2026-111167 GNU LibreDWG through 0.14.8612 Out-of-Bounds Read in acds_private AcDs Decoder

GNU LibreDWG through 0.14.8612 contains a global out-of-bounds read vulnerability in the AcDs decoder acdsprivate that allows attackers to read beyond a static table via an unchecked schema property type index. Attackers can supply a crafted R2004 or R2010+ DWG file with a large 'schdat' property...

CVE-2026-111167

GNU LibreDWG versions through 0.14.8612 are vulnerable to a global out-of-bounds read in the AcDs decoder 's acds_private() function. The root cause is an unchecked schema property type index , which allows an attacker to read beyond a static table. By supplying a crafted R2004 or R2010+ DWG file...