{"id":"OSV-2022-656","aliases":[],"status":"published","title":"Heap-buffer-overflow in dwg_decode_LWPOLYLINE_private","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49630\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ndwg_decode_LWPOLYLINE_private\ndwg_decode_LWPOLYLINE\ndwg_decode_add_object\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2022-07-31T00:00:46.624694Z","modified":"2022-12-10T00:15:05Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"libredwg","ranges":[{"type":"GIT","events":[{"introduced":"7a44f5e43b2a49bf244e24b796a657c9c78f31a1"},{"fixed":"9d068534eb093790d9be1b8aa8ed47cafc7f2285"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49630","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2022-656","title":"Heap-buffer-overflow in dwg_decode_LWPOLYLINE_private","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49630\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ndwg_decode_LWPOLYLINE_private\ndwg_decode_LWPOLYLINE\ndwg_decode_add_object\n```\n","status":"published","published":"2022-07-31T00:00:46.624694Z","modified":"2022-12-10T00:15:05.367372Z","updated_at":"2026-11-02T15:52:49.511349Z"}]}}