OSV-2023-1267
Heap-buffer-overflow in dwg_free_object
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64829
Crash type: Heap-buffer-overflow READ 8
Crash state:
dwg_free_object
dwg_free
llvmfuzz.c
What each source reports
OSV No score
Heap-buffer-overflow in dwg_free_object
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64829
Crash type: Heap-buffer-overflow READ 8
Crash state:
dwg_free_object
dwg_free
llvmfuzz.c
- Record
OSV-2023-1267- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libredwgOSS-Fuzz |
Listed versions, plus commit ranges 0.130.13.10.13.20.13.30.13.3.7163 Show 45 moreShow less0.13.3.71650.13.3.71660.13.3.71680.13.3.71760.13.3.71830.13.3.71860.13.3.71870.13.3.71900.13.3.71990.13.3.72170.13.3.72200.13.3.72230.13.3.72240.13.3.72250.13.3.72260.13.3.72270.13.3.72330.13.3.72400.13.3.72460.13.3.72510.13.3.72570.13.3.72590.13.3.72620.13.3.72640.13.3.72650.13.3.72680.13.3.72700.13.3.72730.13.3.72980.13.3.73060.13.3.73080.13.3.73200.13.3.73240.13.3.73270.13.3.73380.13.3.73410.13.3.73440.13.3.73450.13.3.73510.13.3.73710.13.3.73770.13.3.73850.13.3.74050.13.3.74090.13.3.7411 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2023-1267 is a vulnerability with no CVSS score yet in libredwg, published December 8, 2023. No source lists public exploit code. A source reports a fix.
References
This page doesn't list everything
Left out here: 101 versions. The JSON record has them.