OSV-2023-314
Heap-buffer-overflow in dwg_encode
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57969
Crash type: Heap-buffer-overflow READ 8
Crash state:
dwg_encode
llvmfuzz.c
What each source reports
OSV No score
Heap-buffer-overflow in dwg_encode
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57969
Crash type: Heap-buffer-overflow READ 8
Crash state:
dwg_encode
llvmfuzz.c
- Record
OSV-2023-314- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libredwgOSS-Fuzz |
Listed versions, plus commit ranges 0.12.5.51030.12.5.51040.12.5.51110.12.5.51220.12.5.5135 Show 45 moreShow less0.12.5.51370.12.5.51400.12.5.51420.12.5.51610.12.5.51630.12.5.51690.12.5.51700.12.5.51780.12.5.51790.12.5.51820.12.5.51830.12.5.51840.12.5.51850.12.5.51860.12.5.51950.12.5.52030.12.5.52060.12.5.52070.12.5.52270.12.5.52450.12.5.52490.12.5.52560.12.5.52690.12.5.52700.12.5.52710.12.5.52880.12.5.53140.12.5.53200.12.5.53290.12.5.53330.12.5.53340.12.5.53400.12.5.53420.12.5.53440.12.5.53480.12.5.53530.12.5.53560.12.5.53640.12.5.53770.12.5.53850.12.5.53910.12.5.53930.12.5.53950.12.5.53960.12.5.5405 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2023-314 is a vulnerability with no CVSS score yet in libredwg, published April 14, 2023. No source lists public exploit code. A source reports a fix.
References
This page doesn't list everything
Left out here: 34 versions. The JSON record has them.