MEDIUM
LibreCAD
CVE published 2026-10-14
CVE-2026-110606
A stack-based out-of-bounds read vulnerability exists in LibreCAD libdxfrw through LC2.2.0. This issue arises from a call to strlen on non-NUL-terminated buffers within the dwgReader18::readFileHeader() function. An attacker can exploit this by providing a crafted AC1018, AC1024, or AC1027 DWG file without NUL bytes in the decrypted header, leading to the reading of adjacent stack memory and potentially c [truncated]