OSV-2022-1176

Heap-double-free in dwg_free

No score

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53483

Crash type: Heap-double-free
Crash state:
dwg_free
llvmfuzz.c
dwg_free

What each source reports

OSV No score

Heap-double-free in dwg_free

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53483

Crash type: Heap-double-free
Crash state:
dwg_free
llvmfuzz.c
dwg_free

Record: OSV-2022-1176
Updated: 2026-11-11

Affected packages

Affected packages
Package	Affected	Fixed
`libredwg` OSS-Fuzz	Listed versions, plus commit ranges 0.12.4.45900.12.4.45980.12.4.46010.12.4.46060.12.4.4607 Show 45 moreShow less 0.12.4.46080.12.4.46130.12.4.46150.12.4.46350.12.4.46370.12.4.46410.12.4.46430.12.4.46470.12.4.46520.12.4.46540.12.4.46580.12.4.46600.12.4.46680.12.5.46690.12.5.46780.12.5.46850.12.5.46900.12.5.46930.12.5.46950.12.5.46970.12.5.47000.12.5.47090.12.5.47120.12.5.47150.12.5.47220.12.5.47240.12.5.47260.12.5.47310.12.5.47350.12.5.47390.12.5.47410.12.5.47430.12.5.47480.12.5.47500.12.5.47560.12.5.47600.12.5.47630.12.5.47650.12.5.47720.12.5.47760.12.5.47800.12.5.47840.12.5.47870.12.5.47970.12.5.4803	None known

History

History
Recorded	Changed	Sources
Nov 11, 2026	affected	OSV
Nov 9, 2026	affected	OSV
Nov 8, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 5, 2026	affected	OSV
Nov 4, 2026	affected, facts	OSV
Nov 3, 2026	affected	OSV
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2022-1176 is a vulnerability with no CVSS score yet in libredwg, published November 18, 2022. No source lists public exploit code. No source names a fixed version.

References

bugs.chromium.org/p/oss-fuzz/issues/detail?id=53483

This page doesn't list everything

Left out here: 768 versions. The JSON record has them.