OSV-2023-42
Heap-buffer-overflow in bit_read_BB
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55579
Crash type: Heap-buffer-overflow READ 1
Crash state:
bit_read_BB
dwg_decode_MINSERT_private
dwg_decode_MINSERT
What each source reports
OSV No score
Heap-buffer-overflow in bit_read_BB
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55579
Crash type: Heap-buffer-overflow READ 1
Crash state:
bit_read_BB
dwg_decode_MINSERT_private
dwg_decode_MINSERT
- Record
OSV-2023-42- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libredwgOSS-Fuzz |
Listed versions, plus commit ranges 0.12.5.50160.12.5.50240.12.5.50280.12.5.50300.12.5.5035 Show 45 moreShow less0.12.5.50400.12.5.50440.12.5.50460.12.5.50500.12.5.50520.12.5.50600.12.5.50610.12.5.50660.12.5.50850.12.5.50910.12.5.50920.12.5.50930.12.5.50940.12.5.50950.12.5.50970.12.5.51010.12.5.51030.12.5.51040.12.5.51110.12.5.51220.12.5.51350.12.5.51370.12.5.51400.12.5.51420.12.5.51610.12.5.51630.12.5.51690.12.5.51700.12.5.51780.12.5.51790.12.5.51820.12.5.51830.12.5.51840.12.5.51850.12.5.51860.12.5.51950.12.5.52030.12.5.52060.12.5.52070.12.5.52270.12.5.52450.12.5.52490.12.5.52560.12.5.52690.12.5.5270 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2023-42 is a vulnerability with no CVSS score yet in libredwg, published February 2, 2023. No source lists public exploit code. A source reports a fix.
References
This page doesn't list everything
Left out here: 306 versions. The JSON record has them.