LibreCAD - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/librecad/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 11 Nov 2026 05:59:42 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgLibreCAD: Heap-based out-of-bounds write in libdxfrw (CVE-2026-126497)https://feed.craftedsignal.io/briefs/2026-11-librecad-heap-overflow/Wed, 11 Nov 2026 05:59:42 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-librecad-heap-overflow/LibreCAD versions through 2.2.1.6 contain a heap-based out-of-bounds write vulnerability in the libdxfrw library that could allow for application crashes or arbitrary code execution via a crafted DWG file.LibreCAD versions through 2.2.1.6 are susceptible to a heap-based out-of-bounds write vulnerability located in the dwgReader18::parseDataPage() function of the bundled libdxfrw library. The vulnerability is caused by a failure to perform adequate boundary checks on buffer sizes and page offsets. An attacker can exploit this by providing a specially crafted AC1018 (R2004) DWG file containing malicious startOffset values, which triggers an out-of-bounds write in the decompress18 function when the file is parsed by LibreCAD.

Impact

Successful exploitation may result in an application crash (denial of service) or potential arbitrary code execution within the context of the user running LibreCAD.

Recommendation

  • Inventory all systems where LibreCAD is installed and identify the current version.
  • Advise users to avoid opening untrusted or unsolicited DWG files until a security update is released and applied.
  • Implement endpoint monitoring for anomalous LibreCAD process behavior or crash activity.
]]>highadvisory