OSV-2021-1343

Heap-buffer-overflow in get_next_owned_entity

No score

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38994

Crash type: Heap-buffer-overflow READ 8
Crash state:
get_next_owned_entity
dwg_write_dxfb
llvmfuzz.c

What each source reports

OSVNo score

Heap-buffer-overflow in get_next_owned_entity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38994

Crash type: Heap-buffer-overflow READ 8
Crash state:
get_next_owned_entity
dwg_write_dxfb
llvmfuzz.c

Record: OSV-2021-1343
Updated: 2026-11-11

Affected packages

Affected packages
Package	Affected	Fixed
`libredwg` OSS-Fuzz	Listed versions, plus commit ranges 0.12.4.43130.12.4.43170.12.4.43210.12.4.43240.12.4.4331 Show 45 moreShow less 0.12.4.43380.12.4.43430.12.4.43480.12.4.43620.12.4.43640.12.4.43670.12.4.43680.12.4.43750.12.4.43780.12.4.43820.12.4.43840.12.4.43870.12.4.43900.12.4.43930.12.5-pre0.12.4.43950.12.4.43980.12.4.43990.12.4.44000.12.4.44020.12.50.12.4.44030.12.4.44040.12.4.44090.12.4.44150.12.4.44200.12.4.44230.12.4.44250.12.4.44300.12.4.44370.12.4.44420.12.4.44440.12.4.44620.12.4.44660.12.4.44670.12.4.44750.12.4.44870.12.4.44910.12.4.44920.12.4.44940.12.4.44970.12.4.45070.12.4.45150.12.4.45170.12.4.4522	None known

History

History
Recorded	Changed	Sources
Nov 11, 2026	affected	OSV
Nov 10, 2026	affected	OSV
Nov 9, 2026	affected	OSV
Nov 8, 2026	affected	OSV
Nov 7, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 5, 2026	affected	OSV
Nov 4, 2026	affected, facts	OSV
Nov 3, 2026	affected	OSV
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2021-1343 is a vulnerability with no CVSS score yet in libredwg, published September 21, 2021. No source lists public exploit code. No source names a fixed version.

References

bugs.chromium.org/p/oss-fuzz/issues/detail?id=38994

This page doesn't list everything

Left out here: 832 versions. The JSON record has them.