{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/librecad/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:librecad:librecad:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.8,"id":"CVE-2026-126497"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["LibreCAD (\u003c= 2.2.1.6)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["LibreCAD"],"content_html":"\u003cp\u003eLibreCAD versions through 2.2.1.6 are susceptible to a heap-based out-of-bounds write vulnerability located in the \u003ccode\u003edwgReader18::parseDataPage()\u003c/code\u003e function of the bundled \u003ccode\u003elibdxfrw\u003c/code\u003e library. The vulnerability is caused by a failure to perform adequate boundary checks on buffer sizes and page offsets. An attacker can exploit this by providing a specially crafted AC1018 (R2004) DWG file containing malicious \u003ccode\u003estartOffset\u003c/code\u003e values, which triggers an out-of-bounds write in the \u003ccode\u003edecompress18\u003c/code\u003e function when the file is parsed by LibreCAD.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation may result in an application crash (denial of service) or potential arbitrary code execution within the context of the user running LibreCAD.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all systems where LibreCAD is installed and identify the current version.\u003c/li\u003e\n\u003cli\u003eAdvise users to avoid opening untrusted or unsolicited DWG files until a security update is released and applied.\u003c/li\u003e\n\u003cli\u003eImplement endpoint monitoring for anomalous LibreCAD process behavior or crash activity.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-11T05:59:42Z","date_published":"2026-11-11T05:59:42Z","id":"https://feed.craftedsignal.io/briefs/2026-11-librecad-heap-overflow/","summary":"LibreCAD versions through 2.2.1.6 contain a heap-based out-of-bounds write vulnerability in the libdxfrw library that could allow for application crashes or arbitrary code execution via a crafted DWG file.","title":"LibreCAD: Heap-based out-of-bounds write in libdxfrw (CVE-2026-126497)","url":"https://feed.craftedsignal.io/briefs/2026-11-librecad-heap-overflow/"}],"language":"en","title":"CraftedSignal Threat Feed - LibreCAD","version":"https://jsonfeed.org/version/1.1"}