OSV-2023-850
Heap-buffer-overflow in bit_TV_to_utf8
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62363
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
bit_TV_to_utf8
json_cquote
dwg_json_LAYOUT_private
What each source reports
OSV No score
Heap-buffer-overflow in bit_TV_to_utf8
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62363
Crash type: Heap-buffer-overflow WRITE 1
Crash state:
bit_TV_to_utf8
json_cquote
dwg_json_LAYOUT_private
- Record
OSV-2023-850- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libredwgOSS-Fuzz |
Listed versions, plus commit ranges 0.12.5.53200.12.5.53290.12.5.53330.12.5.53340.12.5.5340 Show 45 moreShow less0.12.5.53420.12.5.53440.12.5.53480.12.5.53530.12.5.53560.12.5.53640.12.5.53770.12.5.53850.12.5.53910.12.5.53930.12.5.53950.12.5.53960.12.5.54050.12.5.54110.12.5.54150.12.5.54170.12.5.54220.12.5.54290.12.5.54320.12.5.54350.12.5.54390.12.5.54420.12.5.54450.12.5.54540.12.5.54580.12.5.54620.12.5.54690.12.5.54710.12.5.54730.12.5.54740.12.5.54870.12.5.54940.12.5.55040.12.5.55060.12.5.55130.12.5.55160.12.5.55180.12.5.55210.12.5.55280.12.5.55300.12.5.55370.12.5.55390.12.5.55440.12.5.55460.12.5.5549 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2023-850 is a vulnerability with no CVSS score yet in libredwg, published September 15, 2023. No source lists public exploit code. A source reports a fix.
References
This page doesn't list everything
Left out here: 180 versions. The JSON record has them.