{"id":"OSV-2023-1149","aliases":[],"status":"published","title":"Heap-buffer-overflow in bit_read_fixed","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64118\n\n```\nCrash type: Heap-buffer-overflow READ 16\nCrash state:\nbit_read_fixed\nbit_read_TF\ndecode_preR13_sentinel\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-11-13T13:01:37.087461Z","modified":"2023-11-13T13:01:37Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"libredwg","ranges":[{"type":"GIT","events":[{"introduced":"524364b216354e5a4297861456f3811f3e697ead"},{"fixed":"774894c13e511318215a888eb483d76282a18ed1"}]}],"versions":["0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64118","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2023-1149","title":"Heap-buffer-overflow in bit_read_fixed","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64118\n\n```\nCrash type: Heap-buffer-overflow READ 16\nCrash state:\nbit_read_fixed\nbit_read_TF\ndecode_preR13_sentinel\n```\n","status":"published","published":"2023-11-13T13:01:37.087461Z","modified":"2023-11-13T13:01:37.087873Z","updated_at":"2026-11-02T15:52:49.511349Z"}]}}