Every CVE Search/ Get API key

OSV-2023-874

Memcpy-param-overlap in bit_u_expand

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62461

Crash type: Memcpy-param-overlap
Crash state:
bit_u_expand
bit_TV_to_utf8
dwg_decode_header_variables

What each source reports

OSV No score

Memcpy-param-overlap in bit_u_expand

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62461

Crash type: Memcpy-param-overlap
Crash state:
bit_u_expand
bit_TV_to_utf8
dwg_decode_header_variables
Record
OSV-2023-874
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
libredwg
OSS-Fuzz
Listed versions, plus commit ranges
0.12.5.61490.12.5.61570.12.5.61600.12.5.61620.12.5.6164
Show 39 moreShow less
0.12.5.61690.12.5.61710.12.5.61730.12.5.61830.12.5.61870.12.5.61910.12.5.61940.12.5.61990.12.5.62030.12.5.62050.12.5.62090.12.5.62140.12.5.62160.12.5.62200.12.5.62260.12.5.62290.12.5.62310.12.5.62360.12.5.62410.12.5.62430.12.5.62450.12.5.62480.12.5.62530.12.5.62570.12.5.62630.12.5.62690.12.5.62710.12.5.62770.12.5.62790.12.5.62850.12.5.62940.12.5.63020.12.5.63060.12.5.63100.12.5.63130.12.5.63160.12.5.63190.12.5.63210.12.5.6325
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2023-874 is a vulnerability with no CVSS score yet in libredwg, published September 18, 2023. No source lists public exploit code. A source reports a fix.

References

MoveEnter Open