Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:generic/libredwg@0.12.4%2B4517
purl pkg:generic/libredwg@0.12.4%2B4517
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
OSV-2022-1180

Heap-buffer-overflow in json_common_entity_data OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53468 ``` Crash type: Heap-buffer-overflow READ 8 Crash state: json_common_entity_data json_objects_write dwg_write_json ``` There are no reported fixed by versions.
OSV-2022-128

Stack-buffer-overflow in decompress_rNUMBER OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44432 Crash type: Stack-buffer-overflow WRITE 1 Crash state: decompress_rNUMBER read_rNUMBER_meta_data dwg_decode There are no reported fixed by versions.
OSV-2022-363

Heap-use-after-free in dwg_free_TABLEGEOMETRY_private OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46847 ``` Crash type: Heap-use-after-free READ 8 Crash state: dwg_free_TABLEGEOMETRY_private dwg_free_TABLEGEOMETRY dwg_free_variable_no_class ``` There are no reported fixed by versions.
OSV-2022-398

Heap-buffer-overflow in json_common_entity_data OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47259 ``` Crash type: Heap-buffer-overflow READ 8 Crash state: json_common_entity_data dwg_json_REPEAT dwg_json_object ``` There are no reported fixed by versions.
This package is not known to fix any advisories.