OSV-2023-452

Heap-buffer-overflow in json_write_TF

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59523

Crash type: Heap-buffer-overflow READ {*}
Crash state:
json_write_TF
dwg_json_LTYPE
json_objects_write

What each source reports

OSV No score

Heap-buffer-overflow in json_write_TF

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59523

Crash type: Heap-buffer-overflow READ {*}
Crash state:
json_write_TF
dwg_json_LTYPE
json_objects_write

Record: OSV-2023-452
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`libredwg` OSS-Fuzz	Listed versions, plus commit ranges 0.12.5.57120.12.5.57130.12.5.57160.12.5.57200.12.5.5721 Show 45 moreShow less 0.12.5.57250.12.5.57310.12.5.57330.12.5.57410.12.5.57450.12.5.57460.12.5.57480.12.5.57510.12.5.57540.12.5.57590.12.5.57610.12.5.57640.12.5.57720.12.5.57790.12.5.57840.12.5.57870.12.5.57890.12.5.57930.12.5.57960.12.5.57990.12.5.58020.12.5.58040.12.5.58060.12.5.58090.12.5.58110.12.5.58130.12.5.58220.12.5.58270.12.5.58300.12.5.58320.12.5.58370.12.5.58450.12.5.58520.12.5.58560.12.5.58590.12.5.58620.12.5.58650.12.5.58700.12.5.58750.12.5.58770.12.5.58820.12.5.58850.12.5.58870.12.5.58890.12.5.5894	None known

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2023-452 is a vulnerability with no CVSS score yet in libredwg, published June 3, 2023. No source lists public exploit code. A source reports a fix.

References

bugs.chromium.org/p/oss-fuzz/issues/detail?id=59523

This page doesn't list everything

Left out here: 129 versions. The JSON record has them.