CVE-2026-126497

LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw dwgReader18::parseDataPage function due to unchecked buffer size and page offsets. Attackers can craft an AC1018 R2004 DWG file with malicious startOffset values that cause decompress18 to wri...