OSV-2023-717
Heap-buffer-overflow in bit_TV_to_utf8_codepage
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61593
Crash type: Heap-buffer-overflow READ 1
Crash state:
bit_TV_to_utf8_codepage
bit_TV_to_utf8
dwg_decode_LAYOUT_private
What each source reports
OSV No score
Heap-buffer-overflow in bit_TV_to_utf8_codepage
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61593
Crash type: Heap-buffer-overflow READ 1
Crash state:
bit_TV_to_utf8_codepage
bit_TV_to_utf8
dwg_decode_LAYOUT_private
- Record
OSV-2023-717- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libredwgOSS-Fuzz |
Listed versions, plus commit ranges 0.12.5.61490.12.5.61570.12.5.61600.12.5.61620.12.5.6164 Show 45 moreShow less0.12.5.61690.12.5.61710.12.5.61730.12.5.61830.12.5.61870.12.5.61910.12.5.61940.12.5.61990.12.5.62030.12.5.62050.12.5.62090.12.5.62140.12.5.62160.12.5.62200.12.5.62260.12.5.62290.12.5.62310.12.5.62360.12.5.62410.12.5.62430.12.5.62450.12.5.62480.12.5.62530.12.5.62570.12.5.62630.12.5.62690.12.5.62710.12.5.62770.12.5.62790.12.5.62850.12.5.62940.12.5.63020.12.5.63060.12.5.63100.12.5.63130.12.5.63160.12.5.63190.12.5.63210.12.5.63250.12.5.63330.12.5.63420.12.5.63470.12.5.63500.12.5.63550.12.5.6357 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2023-717 is a vulnerability with no CVSS score yet in libredwg, published August 21, 2023. No source lists public exploit code. A source reports a fix.
References
This page doesn't list everything
Left out here: 65 versions. The JSON record has them.