Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:generic/libredwg@0.12.5%2B4685
purl pkg:generic/libredwg@0.12.5%2B4685
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (16)
Advisory Summary Fixed in package version
OSV-2022-1176

Heap-double-free in dwg_free OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53483 ``` Crash type: Heap-double-free Crash state: dwg_free llvmfuzz.c dwg_free ``` There are no reported fixed by versions.
OSV-2022-1198

Heap-buffer-overflow in dwg_json_LTYPE OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53617 ``` Crash type: Heap-buffer-overflow READ 8 Crash state: dwg_json_LTYPE json_objects_write dwg_write_json ``` There are no reported fixed by versions.
OSV-2022-1251

Heap-buffer-overflow in bit_read_B OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54162 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: bit_read_B dwg_decode_header_variables decode_R13_RNUMBER ``` There are no reported fixed by versions.
OSV-2022-1252

Heap-buffer-overflow in bit_read_BB OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54163 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: bit_read_BB bit_read_BD dwg_decode_header_variables ``` There are no reported fixed by versions.
OSV-2022-1259

Heap-buffer-overflow in dwg_decode_INSERT_private OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54228 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: dwg_decode_INSERT_private dwg_decode_INSERT dwg_decode_add_object ``` There are no reported fixed by versions.
OSV-2022-372

Heap-buffer-overflow in dwg_encode_VERTEX_2D OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46994 ``` Crash type: Heap-buffer-overflow READ 8 Crash state: dwg_encode_VERTEX_2D dwg_encode_add_object dwg_encode ``` There are no reported fixed by versions.
OSV-2022-379

Segv on unknown address in bit_write_TV OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47014 ``` Crash type: Segv on unknown address Crash state: bit_write_TV bit_write_T … There are no reported fixed by versions.
OSV-2022-388

Segv on unknown address in dwg_ref_get_object OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47151 ``` Crash type: Segv on unknown address Crash state: dwg_ref_get_object dwg_geojson_feature … There are no reported fixed by versions.
OSV-2022-400

Heap-double-free in dwg_free_XRECORD_private OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47300 ``` Crash type: Heap-double-free Crash state: dwg_free_XRECORD_private dwg_free_XRECORD dwg_free_object ``` There are no reported fixed by versions.
OSV-2022-653

Heap-double-free in dwg_free_common_entity_data OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49602 ``` Crash type: Heap-double-free Crash state: dwg_free_common_entity_data dwg_free_DIMENSION_ANG2LN dwg_free_object ``` There are no reported fixed by versions.
OSV-2022-654

Heap-buffer-overflow in dwg_geojson_feature OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49618 ``` Crash type: Heap-buffer-overflow READ 8 Crash state: dwg_geojson_feature dwg_geojson_object dwg_write_geojson ``` There are no reported fixed by versions.
OSV-2022-657

Heap-buffer-overflow in dynapi_set_helper OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49613 ``` Crash type: Heap-buffer-overflow WRITE {*} Crash state: dynapi_set_helper dwg_dynapi_entity_set_value dxf_blocks_read ``` There are no reported fixed by versions.
OSV-2022-714

Heap-buffer-overflow in dynapi_set_helper OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50194 ``` Crash type: Heap-buffer-overflow WRITE 16 Crash state: dynapi_set_helper dwg_dynapi_header_set_value json_HEADER ``` There are no reported fixed by versions.
OSV-2023-307

Heap-buffer-overflow in bit_read_BB OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57911 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: bit_read_BB dwg_decode_entity dwg_decode_OLE2FRAME_private ``` There are no reported fixed by versions.
OSV-2023-316

Segv on unknown address in dwg_ref_get_object OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57981 ``` Crash type: Segv on unknown address Crash state: dwg_ref_get_object dwg_geojson_feature … There are no reported fixed by versions.
OSV-2023-634

Heap-buffer-overflow in bit_read_BB OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60993 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: bit_read_BB bit_read_BS dwg_decode_ATTDEF_private ``` There are no reported fixed by versions.
This package is not known to fix any advisories.