CVE-2026-110606 LibreCAD libdxfrw through LC2.2.0 Stack Out-of-Bounds Read via dwgReader18::readFileHeader
Attackers can cause a crash or read stack memory by providing a crafted DWG file to LibreCAD due to an out-of-bounds read in the libdxfrw library.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2026-110606?
CVE-2026-110606 is a medium-severity memory corruption vulnerability in LibreCAD, published on 14 Oct 2026. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
LibreCAD libdxfrw through LC2.2.0 (LibreCAD through 2.2.1.5) contains a stack-based out-of-bounds read vulnerability in dwgReader18::readFileHeader() caused by calling strlen on non-NUL-terminated buffers. Attackers can supply a crafted AC1018, AC1024 or AC1027 DWG file without NUL bytes in the decrypted header to read adjacent stack memory and crash the process.
Weakness: CWE-125
Which versions are affected by CVE-2026-110606?
Linux distribution packages (1)
librecad openSUSE:Tumbleweed | All versions | 2.2.1.5-2.1 |
How do I fix CVE-2026-110606?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-110606 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-110606 exists.
Sources
Also known as DEBIAN-CVE-2026-110606, GHSA-v4r9-37cv-99h9, UBUNTU-CVE-2026-110606, openSUSE-SU-2026:12156-1.