UBUNTU-CVE-2026-126497

LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw dwgReader18::parseDataPage function due to unchecked buffer size and page offsets. Attackers can craft an AC1018 R2004 DWG file with malicious startOffset values that cause decompress18 to wri...

CVE-2026-126497

LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw dwgReader18::parseDataPage function due to unchecked buffer size and page offsets. Attackers can craft an AC1018 R2004 DWG file with malicious startOffset values that cause decompress18 to wri...

SUSE CVE-2026-126497

LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw dwgReader18::parseDataPage function due to unchecked buffer size and page offsets. Attackers can craft an AC1018 R2004 DWG file with malicious startOffset values that cause decompress18 to wri...

CVE-2026-126497

LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw dwgReader18::parseDataPage function due to unchecked buffer size and page offsets. Attackers can craft an AC1018 R2004 DWG file with malicious startOffset values that cause decompress18 to wri...

DEBIAN-CVE-2026-126497

LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw dwgReader18::parseDataPage function due to unchecked buffer size and page offsets. Attackers can craft an AC1018 R2004 DWG file with malicious startOffset values that cause decompress18 to wri...

EUVD-2026-123062

LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw dwgReader18::parseDataPage function due to unchecked buffer size and page offsets. Attackers can craft an AC1018 R2004 DWG file with malicious startOffset values that cause decompress18 to wri...

CVE-2026-126497 LibreCAD through 2.2.1.6 Heap Out-of-Bounds Write via dwgReader18::parseDataPage

LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw dwgReader18::parseDataPage function due to unchecked buffer size and page offsets. Attackers can craft an AC1018 R2004 DWG file with malicious startOffset values that cause decompress18 to wri...

CVE-2026-126497 LibreCAD through 2.2.1.6 Heap Out-of-Bounds Write via dwgReader18::parseDataPage

LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw dwgReader18::parseDataPage function due to unchecked buffer size and page offsets. Attackers can craft an AC1018 R2004 DWG file with malicious startOffset values that cause decompress18 to wri...

CVE-2026-126497

LibreCAD versions up to and including 2.2.1.6 are susceptible to a heap-based out-of-bounds write vulnerability. The flaw exists in the bundled libdxfrw component, specifically within the dwgReader18::parseDataPage() function, caused by unchecked buffer sizes and page offsets. An attacker can exp...

CVE-2026-126497

LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw dwgReader18::parseDataPage function due to unchecked buffer size and page offsets. Attackers can craft an AC1018 R2004 DWG file with malicious startOffset values that cause decompress18 to wri...

CVE-2026-126497: LibreCAD: LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw…

LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw dwgReader18::parseDataPage function due to unchecked buffer size and page offsets. Attackers can craft an AC1018 R2004 DWG file with malicious startOffset values that cause decompress18 to wri...

PT-2026-144916

Name of the Vulnerable Software and Affected Versions LibreCAD versions prior to 2.2.1.7 Description A heap-based out-of-bounds write occurs in the bundled libdxfrw dwgReader18::parseDataPage function because buffer size and page offsets are not checked. An attacker can use a specially crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-126497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw dwgReader18::parseDataPage function due to unchecked...