CVE-2026-126497
Description
A flaw was found in LibreCAD. An attacker could achieve arbitrary code execution or cause a Denial of Service (DoS) by convincing a user to open a specially crafted Drawing (DWG) file. Due to missing buffer size and offset validation in the bundled drawing parser library, opening the malicious file triggers an out-of-bounds write in heap memory, leading to an application crash or potential system compromise.
Statement
Red Hat has evaluated this vulnerability as an Important severity issue because successful exploitation allows arbitrary code execution or application crashes in the context of the running user. Although exploitation demands user interaction to open an untrusted drawing file, the potential compromise of the user's desktop environment elevates the risk above Moderate. LibreCAD is an optional client-side application that is not deployed or enabled by default in standard enterprise deployments.
Mitigation
Avoid opening untrusted or unverified DWG files in LibreCAD. If LibreCAD is not required on the system, remove the optional package:
dnf remove librecad
Removing this package removes 2D CAD functionality. Check dependency resolutions before proceeding to verify that no required desktop packages are removed.
Understanding the Weakness (CWE)
Integrity
Technical Impact: Modify Memory; Execute Unauthorized Code or Commands
Write operations could cause memory corruption. In some cases, an adversary can modify control data such as return addresses in order to execute unexpected code.
Availability
Technical Impact: DoS: Crash, Exit, or Restart
Attempting to access out-of-range, invalid, or unauthorized memory could cause the product to crash.
Other
Technical Impact: Unexpected State
Subsequent write operations can produce undefined or unexpected results.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
