UBUNTU-CVE-2026-126497: Medium severity ubuntu/librecad vulnerability
LibreCAD through 2.2.1.6 contains a heap-based out-of-bounds write vulnerability in the bundled libdxfrw dwgReader18::parseDataPage() function due to unchecked buffer size and page offsets. Attackers can craft an AC1018 (R2004) DWG file with malicious startOffset values that cause decompress18 to write past the heap buffer when opened, causing crashes and potential code execution.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users or systems running Ubuntu's LibreCAD package through version 2.2.1.6 are exposed when they open attacker-crafted AC1018 (R2004) DWG files.
What does an attacker need to exploit it?
An attacker needs to provide a malicious DWG file containing crafted startOffset values. Exploitation occurs when the file is opened by LibreCAD.
What can be done if an update is not immediately available?
Do not open untrusted AC1018 (R2004) DWG files, particularly files received from external or unverified sources. Restricting LibreCAD use to trusted drawing files reduces exposure.