Vulnerabilities affecting this package (7)
| Advisory |
Summary |
Fixed in package version |
OSV-2022-1251
|
Heap-buffer-overflow in bit_read_B OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54162 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: bit_read_B dwg_decode_header_variables decode_R13_RNUMBER ```
|
There are no reported fixed by versions.
|
OSV-2022-1252
|
Heap-buffer-overflow in bit_read_BB OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54163 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: bit_read_BB bit_read_BD dwg_decode_header_variables ```
|
There are no reported fixed by versions.
|
OSV-2022-1259
|
Heap-buffer-overflow in dwg_decode_INSERT_private OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54228 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: dwg_decode_INSERT_private dwg_decode_INSERT dwg_decode_add_object ```
|
There are no reported fixed by versions.
|
OSV-2023-135
|
Heap-buffer-overflow in json_cquote OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56473 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: json_cquote dwg_json_LTYPE json_objects_write ```
|
There are no reported fixed by versions.
|
OSV-2023-316
|
Segv on unknown address in dwg_ref_get_object OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57981 ``` Crash type: Segv on unknown address Crash state: dwg_ref_get_object dwg_geojson_feature …
|
There are no reported fixed by versions.
|
OSV-2023-46
|
Heap-buffer-overflow in json_cquote OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55607 ``` Crash type: Heap-buffer-overflow WRITE 1 Crash state: json_cquote json_preR13_header_write_private dwg_write_json ```
|
There are no reported fixed by versions.
|
OSV-2023-634
|
Heap-buffer-overflow in bit_read_BB OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60993 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: bit_read_BB bit_read_BS dwg_decode_ATTDEF_private ```
|
There are no reported fixed by versions.
|
This package is not known to fix any advisories.