OSV-2025-324
Index-out-of-bounds in dwg_decode_eed
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=415083665
Crash type: Index-out-of-bounds
Crash state:
dwg_decode_eed
dwg_decode_entity
dwg_decode_ATTDEF_private
What each source reports
OSV No score
Index-out-of-bounds in dwg_decode_eed
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=415083665
Crash type: Index-out-of-bounds
Crash state:
dwg_decode_eed
dwg_decode_entity
dwg_decode_ATTDEF_private
- Record
OSV-2025-324- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libredwgOSS-Fuzz |
Listed versions, plus commit ranges 0.13.3.74240.13.3.74260.13.3.74290.13.3.74310.13.3.7434 Show 31 moreShow less0.13.3.74370.13.3.74420.13.3.74450.13.3.74530.13.3.74560.13.3.74600.13.3.74660.13.3.74690.13.3.74720.13.3.74730.13.3.74830.13.3.74910.13.3.75010.13.3.75070.13.3.75160.13.3.75330.13.3.75340.13.3.75350.13.3.75390.13.3.75450.13.3.75510.13.3.75520.13.3.75540.13.3.75570.13.3.75580.13.3.75620.13.3.75710.13.3.75740.13.3.75770.13.3.75820.13.3.7599 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2025-324 is a vulnerability with no CVSS score yet in libredwg, published May 5, 2025. No source lists public exploit code. A source reports a fix.