CVE-2026-110606 LibreCAD libdxfrw through LC2.2.0 Stack Out-of-Bounds Read via dwgReader18::readFileHeader

LibreCAD libdxfrw through LC2.2.0 LibreCAD through 2.2.1.5 contains a stack-based out-of-bounds read vulnerability in dwgReader18::readFileHeader caused by calling strlen on non-NUL-terminated buffers. Attackers can supply a crafted AC1018, AC1024 or AC1027 DWG file without NUL bytes in the...

EUVD-2026-101234

LibreCAD libdxfrw through LC2.2.0 LibreCAD through 2.2.1.5 contains a stack-based out-of-bounds read vulnerability in dwgReader18::readFileHeader caused by calling strlen on non-NUL-terminated buffers. Attackers can supply a crafted AC1018, AC1024 or AC1027 DWG file without NUL bytes in the...

CVE-2026-110606

The libdxfrw library used in LibreCAD (versions through LC2.2.0 , which includes LibreCAD through 2.2.1.5 ) is vulnerable to a stack-based out-of-bounds read in the dwgReader18::readFileHeader() function. The root cause is the improper use of strlen on buffers that are not NUL-terminated . An att...