{"id":"OSV-2023-997","aliases":[],"status":"published","title":"Heap-buffer-overflow in dxf_fixup_string","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63137\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ndxf_fixup_string\ndwg_dxf_LAYOUT_private\ndwg_dxf_LAYOUT\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2023-10-10T13:00:49.774042Z","modified":"2023-10-10T13:00:49Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"libredwg","ranges":[{"type":"GIT","events":[{"introduced":"0ad719902273a8a4d79c026d01ef2057c173579b"},{"fixed":"b01634c896c29bb3a778daeef9e13ef115995610"}]}],"versions":["0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63137","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2023-997","title":"Heap-buffer-overflow in dxf_fixup_string","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63137\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ndxf_fixup_string\ndwg_dxf_LAYOUT_private\ndwg_dxf_LAYOUT\n```\n","status":"published","published":"2023-10-10T13:00:49.774042Z","modified":"2023-10-10T13:00:49.774346Z","updated_at":"2026-11-02T15:52:49.747775Z"}]}}