Every CVE Search/ Get API key

OSV-2023-748

Segv on unknown address in dwg_encode

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61795

Crash type: Segv on unknown address
Crash state:
dwg_encode
llvmfuzz.c

What each source reports

OSV No score

Segv on unknown address in dwg_encode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61795

Crash type: Segv on unknown address
Crash state:
dwg_encode
llvmfuzz.c
Record
OSV-2023-748
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
libredwg
OSS-Fuzz
Listed versions, plus commit ranges
0.12.5.61940.12.5.61990.12.5.62030.12.5.62050.12.5.6209
Show 45 moreShow less
0.12.5.62140.12.5.62160.12.5.62200.12.5.62260.12.5.62290.12.5.62310.12.5.62360.12.5.62410.12.5.62430.12.5.62450.12.5.62480.12.5.62530.12.5.62570.12.5.62630.12.5.62690.12.5.62710.12.5.62770.12.5.62790.12.5.62850.12.5.62940.12.5.63020.12.5.63060.12.5.63100.12.5.63130.12.5.63160.12.5.63190.12.5.63210.12.5.63250.12.5.63330.12.5.63420.12.5.63470.12.5.63500.12.5.63550.12.5.63570.12.5.63600.12.5.63620.12.5.63660.12.5.63690.12.5.63740.12.5.63770.12.5.63840.12.5.63880.12.5.63910.12.5.63940.12.5.6399
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2023-748 is a vulnerability with no CVSS score yet in libredwg, published August 27, 2023. No source lists public exploit code. A source reports a fix.

References

This page doesn't list everything

Left out here: 24 versions. The JSON record has them.

MoveEnter Open