OSV-2024-384
Heap-use-after-free in json_fixed_string
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67528
Crash type: Heap-use-after-free WRITE 11
Crash state:
json_fixed_string
json_RNUMBER_Header
dwg_read_json
What each source reports
OSV No score
Heap-use-after-free in json_fixed_string
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67528
Crash type: Heap-use-after-free WRITE 11
Crash state:
json_fixed_string
json_RNUMBER_Header
dwg_read_json
- Record
OSV-2024-384- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libredwgOSS-Fuzz |
Listed versions, plus commit ranges 0.130.13.10.13.20.13.30.13.3.7163 Show 45 moreShow less0.13.3.71650.13.3.71660.13.3.71680.13.3.71760.13.3.71830.13.3.71860.13.3.71870.13.3.71900.13.3.71990.13.3.72170.13.3.72200.13.3.72230.13.3.72240.13.3.72250.13.3.72260.13.3.72270.13.3.72330.13.3.72400.13.3.72460.13.3.72510.13.3.72570.13.3.72590.13.3.72620.13.3.72640.13.3.72650.13.3.72680.13.3.72700.13.3.72730.13.3.72980.13.3.73060.13.3.73080.13.3.73200.13.3.73240.13.3.73270.13.3.73380.13.3.73410.13.3.73440.13.3.73450.13.3.73510.13.3.73710.13.3.73770.13.3.73850.13.3.74050.13.3.74090.13.3.7411 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2024-384 is a vulnerability with no CVSS score yet in libredwg, published April 30, 2024. No source lists public exploit code. A source reports a fix.
References
This page doesn't list everything
Left out here: 4 versions. The JSON record has them.