OSV-2022-388

Segv on unknown address in dwg_ref_get_object

No score

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47151

Crash type: Segv on unknown address
Crash state:
dwg_ref_get_object
dwg_geojson_feature
dwg_geojson_object

What each source reports

OSV No score

Segv on unknown address in dwg_ref_get_object

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47151

Crash type: Segv on unknown address
Crash state:
dwg_ref_get_object
dwg_geojson_feature
dwg_geojson_object

Record: OSV-2022-388
Updated: 2026-11-10

Affected packages

Affected packages
Package	Affected	Fixed
`libredwg` OSS-Fuzz	Listed versions, plus commit ranges 0.12.4.45220.12.4.45270.12.4.45300.12.4.45330.12.4.4535 Show 45 moreShow less 0.12.4.45420.12.4.45440.12.4.45450.12.4.45480.12.4.45500.12.4.45530.12.4.45660.12.4.45670.12.4.45720.12.4.45830.12.4.45900.12.4.45980.12.4.46010.12.4.46060.12.4.46070.12.4.46080.12.4.46130.12.4.46150.12.4.46350.12.4.46370.12.4.46410.12.4.46430.12.4.46470.12.4.46520.12.4.46540.12.4.46580.12.4.46600.12.4.46680.12.5.46690.12.5.46780.12.5.46850.12.5.46900.12.5.46930.12.5.46950.12.5.46970.12.5.47000.12.5.47090.12.5.47120.12.5.47150.12.5.47220.12.5.47240.12.5.47260.12.5.47310.12.5.47350.12.5.4739	None known

History

History
Recorded	Changed	Sources
Nov 10, 2026	affected	OSV
Nov 9, 2026	affected	OSV
Nov 8, 2026	affected	OSV
Nov 7, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 5, 2026	affected, facts	OSV
Nov 3, 2026	affected	OSV
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2022-388 is a vulnerability with no CVSS score yet in libredwg, published May 1, 2022. No source lists public exploit code. No source names a fixed version.

References

bugs.chromium.org/p/oss-fuzz/issues/detail?id=47151

This page doesn't list everything

Left out here: 780 versions. The JSON record has them.