CVE-2026-126497 | LibreCAD up to 2.2.1.6 dwgReader18 parseDataPage heap-based overflow

November 11, 2026 Yanac

A vulnerability was found in LibreCAD up to 2.2.1.6. It has been declared as problematic. This issue affects the function dwgReader18::parseDataPage of the component dwgReader18. Such manipulation leads to heap-based buffer overflow.

This vulnerability is referenced as CVE-2026-126497. The attack can only be performed from a local environment. No exploit is available.VulDB Recent EntriesRead More