OSV-2023-397
Heap-buffer-overflow in json_write_TF
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58915
Crash type: Heap-buffer-overflow READ 1
Crash state:
json_write_TF
json_preR13_header_write_private
dwg_write_json
What each source reports
OSV No score
Heap-buffer-overflow in json_write_TF
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58915
Crash type: Heap-buffer-overflow READ 1
Crash state:
json_write_TF
json_preR13_header_write_private
dwg_write_json
- Record
OSV-2023-397- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libredwgOSS-Fuzz |
Listed versions, plus commit ranges 0.12.5.55570.12.5.55600.12.5.55630.12.5.55700.12.5.5577 Show 45 moreShow less0.12.5.55840.12.5.56250.12.5.56460.12.5.56480.12.5.56540.12.5.56560.12.5.56600.12.5.56630.12.5.56660.12.5.56670.12.5.56680.12.5.56710.12.5.56880.12.5.56910.12.5.56970.12.5.57000.12.5.57080.12.5.57100.12.5.57120.12.5.57130.12.5.57160.12.5.57200.12.5.57210.12.5.57250.12.5.57310.12.5.57330.12.5.57410.12.5.57450.12.5.57460.12.5.57480.12.5.57510.12.5.57540.12.5.57590.12.5.57610.12.5.57640.12.5.57720.12.5.57790.12.5.57840.12.5.57870.12.5.57890.12.5.57930.12.5.57960.12.5.57990.12.5.58020.12.5.5804 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2023-397 is a vulnerability with no CVSS score yet in libredwg, published May 14, 2023. No source lists public exploit code. A source reports a fix.
References
This page doesn't list everything
Left out here: 160 versions. The JSON record has them.