OSV-2023-1099
Heap-buffer-overflow in dwg_geojson_object
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63761
Crash type: Heap-buffer-overflow READ 8
Crash state:
dwg_geojson_object
dwg_write_geojson
llvmfuzz.c
What each source reports
OSV No score
Heap-buffer-overflow in dwg_geojson_object
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63761
Crash type: Heap-buffer-overflow READ 8
Crash state:
dwg_geojson_object
dwg_write_geojson
llvmfuzz.c
- Record
OSV-2023-1099- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libredwgOSS-Fuzz |
Listed versions, plus commit ranges 0.12.5.60270.12.5.60330.12.5.60370.12.5.60400.12.5.6043 Show 45 moreShow less0.12.5.60440.12.5.60460.12.5.60550.12.5.60570.12.5.60680.12.5.60760.12.5.60770.12.5.60780.12.5.60800.12.5.60900.12.5.60960.12.5.61020.12.5.61090.12.5.61110.12.5.61130.12.5.61160.12.5.61180.12.5.61210.12.5.61270.12.5.61280.12.5.61330.12.5.61350.12.5.61380.12.5.61470.12.5.61490.12.5.61570.12.5.61600.12.5.61620.12.5.61640.12.5.61690.12.5.61710.12.5.61730.12.5.61830.12.5.61870.12.5.61910.12.5.61940.12.5.61990.12.5.62030.12.5.62050.12.5.62090.12.5.62140.12.5.62160.12.5.62200.12.5.62260.12.5.6229 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2023-1099 is a vulnerability with no CVSS score yet in libredwg, published November 1, 2023. No source lists public exploit code. A source reports a fix.
References
This page doesn't list everything
Left out here: 62 versions. The JSON record has them.