OSV-2022-129
Heap-buffer-overflow in dwg_free_HATCH_private
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44481
Crash type: Heap-buffer-overflow READ 8
Crash state:
dwg_free_HATCH_private
dwg_free_HATCH
dwg_free_object
What each source reports
OSV No score
Heap-buffer-overflow in dwg_free_HATCH_private
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44481
Crash type: Heap-buffer-overflow READ 8
Crash state:
dwg_free_HATCH_private
dwg_free_HATCH
dwg_free_object
- Record
OSV-2022-129- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libredwgOSS-Fuzz |
Listed versions, plus commit ranges 0.12.3.41630.12.3.41650.12.3.41670.12.3.41730.12.3.4176 Show 45 moreShow less0.12.3.41780.12.3.41800.12.3.41850.12.3.41890.12.3.41910.12.3.41940.12.3.42010.12.3.42030.12.3.42060.12.3.42190.12.3.42210.12.3.42290.12.3.42310.12.3.42440.12.3.42480.12.3.42500.12.3.42530.12.3.42610.12.3.42640.12.3.42670.12.3.42700.12.3.42730.12.3.42800.12.40.12.4.42870.12.4.42880.12.4.42960.12.4.42980.12.4.43000.12.4.43020.12.4.43070.12.4.43130.12.4.43170.12.4.43210.12.4.43240.12.4.43310.12.4.43380.12.4.43430.12.4.43480.12.4.43620.12.4.43640.12.4.43670.12.4.43680.12.4.43750.12.4.4378 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2022-129 is a vulnerability with no CVSS score yet in libredwg, published February 9, 2022. No source lists public exploit code. A source reports a fix.
References
This page doesn't list everything
Left out here: 20 versions. The JSON record has them.