Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:generic/libredwg@0.12.4%2B4637
purl pkg:generic/libredwg@0.12.4%2B4637
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (10)
Advisory Summary Fixed in package version
OSV-2022-1180

Heap-buffer-overflow in json_common_entity_data OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53468 ``` Crash type: Heap-buffer-overflow READ 8 Crash state: json_common_entity_data json_objects_write dwg_write_json ``` There are no reported fixed by versions.
OSV-2022-1211

Heap-buffer-overflow in bit_calc_CRC OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53750 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: bit_calc_CRC decode_preR13 dwg_decode ``` There are no reported fixed by versions.
OSV-2022-1259

Heap-buffer-overflow in dwg_decode_INSERT_private OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54228 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: dwg_decode_INSERT_private dwg_decode_INSERT dwg_decode_add_object ``` There are no reported fixed by versions.
OSV-2022-398

Heap-buffer-overflow in json_common_entity_data OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47259 ``` Crash type: Heap-buffer-overflow READ 8 Crash state: json_common_entity_data dwg_json_REPEAT dwg_json_object ``` There are no reported fixed by versions.
OSV-2022-403

Heap-use-after-free in dwg_add_handleref OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47319 ``` Crash type: Heap-use-after-free READ 8 Crash state: dwg_add_handleref dwg_add_STYLE decode_preR13_section ``` There are no reported fixed by versions.
OSV-2022-654

Heap-buffer-overflow in dwg_geojson_feature OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49618 ``` Crash type: Heap-buffer-overflow READ 8 Crash state: dwg_geojson_feature dwg_geojson_object dwg_write_geojson ``` There are no reported fixed by versions.
OSV-2022-656

Heap-buffer-overflow in dwg_decode_LWPOLYLINE_private OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49630 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: dwg_decode_LWPOLYLINE_private dwg_decode_LWPOLYLINE dwg_decode_add_object ``` There are no reported fixed by versions.
OSV-2022-657

Heap-buffer-overflow in dynapi_set_helper OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49613 ``` Crash type: Heap-buffer-overflow WRITE {*} Crash state: dynapi_set_helper dwg_dynapi_entity_set_value dxf_blocks_read ``` There are no reported fixed by versions.
OSV-2022-664

Heap-buffer-overflow in decode_preR13_section_hdr OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49675 ``` Crash type: Heap-buffer-overflow WRITE 4 Crash state: decode_preR13_section_hdr decode_preR13 dwg_decode ``` There are no reported fixed by versions.
OSV-2023-316

Segv on unknown address in dwg_ref_get_object OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57981 ``` Crash type: Segv on unknown address Crash state: dwg_ref_get_object dwg_geojson_feature … There are no reported fixed by versions.
This package is not known to fix any advisories.