Threats tagged 'ghsa-8vq5-h62f-ccwp'

LibreCAD versions through 2.2.1.6 have a heap-based out-of-bounds write vulnerability in the bundled libdxfrw library's dwgReader18::parseDataPage() function. This flaw arises from unchecked buffer sizes and page offsets when processing AC1018 (R2004) DWG files. Maliciously crafted DWG files with manipulated startOffset values can trigger heap buffer overflows during decompression, potentially causing application crashes and enabling code execution.