OSV-2022-714

Heap-buffer-overflow in dynapi_set_helper

No score

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50194

Crash type: Heap-buffer-overflow WRITE 16
Crash state:
dynapi_set_helper
dwg_dynapi_header_set_value
json_HEADER

What each source reports

OSV No score

Heap-buffer-overflow in dynapi_set_helper

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50194

Crash type: Heap-buffer-overflow WRITE 16
Crash state:
dynapi_set_helper
dwg_dynapi_header_set_value
json_HEADER

Record: OSV-2022-714
Updated: 2026-11-09

Affected packages

Affected packages
Package	Affected	Fixed
`libredwg` OSS-Fuzz	Listed versions, plus commit ranges 0.12.4.46350.12.4.46370.12.4.46410.12.4.46430.12.4.4647 Show 45 moreShow less 0.12.4.46520.12.4.46540.12.4.46580.12.4.46600.12.4.46680.12.5.46690.12.5.46780.12.5.46850.12.5.46900.12.5.46930.12.5.46950.12.5.46970.12.5.47000.12.5.47090.12.5.47120.12.5.47150.12.5.47220.12.5.47240.12.5.47260.12.5.47310.12.5.47350.12.5.47390.12.5.47410.12.5.47430.12.5.47480.12.5.47500.12.5.47560.12.5.47600.12.5.47630.12.5.47650.12.5.47720.12.5.47760.12.5.47800.12.5.47840.12.5.47870.12.5.47970.12.5.48030.12.5.48050.12.5.48150.12.5.48200.12.5.48230.12.5.48250.12.5.48310.12.5.48330.12.5.4835	None known

History

History
Recorded	Changed	Sources
Nov 9, 2026	affected	OSV
Nov 8, 2026	affected	OSV
Nov 7, 2026	affected	OSV
Nov 6, 2026	affected	OSV
Nov 5, 2026	affected	OSV
Nov 4, 2026	affected, facts	OSV
Nov 3, 2026	affected	OSV
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2022-714 is a vulnerability with no CVSS score yet in libredwg, published August 15, 2022. No source lists public exploit code. No source names a fixed version.

References

bugs.chromium.org/p/oss-fuzz/issues/detail?id=50194

This page doesn't list everything

Left out here: 756 versions. The JSON record has them.