OSV-2023-997
Heap-buffer-overflow in dxf_fixup_string
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63137
Crash type: Heap-buffer-overflow READ 1
Crash state:
dxf_fixup_string
dwg_dxf_LAYOUT_private
dwg_dxf_LAYOUT
What each source reports
OSV No score
Heap-buffer-overflow in dxf_fixup_string
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63137
Crash type: Heap-buffer-overflow READ 1
Crash state:
dxf_fixup_string
dwg_dxf_LAYOUT_private
dwg_dxf_LAYOUT
- Record
OSV-2023-997- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libredwgOSS-Fuzz |
Listed versions, plus commit ranges 0.12.5.61160.12.5.61180.12.5.61210.12.5.61270.12.5.6128 Show 45 moreShow less0.12.5.61330.12.5.61350.12.5.61380.12.5.61470.12.5.61490.12.5.61570.12.5.61600.12.5.61620.12.5.61640.12.5.61690.12.5.61710.12.5.61730.12.5.61830.12.5.61870.12.5.61910.12.5.61940.12.5.61990.12.5.62030.12.5.62050.12.5.62090.12.5.62140.12.5.62160.12.5.62200.12.5.62260.12.5.62290.12.5.62310.12.5.62360.12.5.62410.12.5.62430.12.5.62450.12.5.62480.12.5.62530.12.5.62570.12.5.62630.12.5.62690.12.5.62710.12.5.62770.12.5.62790.12.5.62850.12.5.62940.12.5.63020.12.5.63060.12.5.63100.12.5.63130.12.5.6316 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2023-997 is a vulnerability with no CVSS score yet in libredwg, published October 10, 2023. No source lists public exploit code. A source reports a fix.
References
This page doesn't list everything
Left out here: 44 versions. The JSON record has them.