Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:generic/libredwg@0.12.5%2B6080
purl pkg:generic/libredwg@0.12.5%2B6080
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (15)
Advisory Summary Fixed in package version
OSV-2022-1251

Heap-buffer-overflow in bit_read_B OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54162 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: bit_read_B dwg_decode_header_variables decode_R13_RNUMBER ``` There are no reported fixed by versions.
OSV-2022-1252

Heap-buffer-overflow in bit_read_BB OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54163 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: bit_read_BB bit_read_BD dwg_decode_header_variables ``` There are no reported fixed by versions.
OSV-2022-1259

Heap-buffer-overflow in dwg_decode_INSERT_private OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54228 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: dwg_decode_INSERT_private dwg_decode_INSERT dwg_decode_add_object ``` There are no reported fixed by versions.
OSV-2023-1063

Heap-double-free in dwg_free_object OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63537 ``` Crash type: Heap-double-free Crash state: dwg_free_object dwg_free llvmfuzz.c ``` There are no reported fixed by versions.
OSV-2023-1099

Heap-buffer-overflow in dwg_geojson_object OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63761 ``` Crash type: Heap-buffer-overflow READ 8 Crash state: dwg_geojson_object dwg_write_geojson llvmfuzz.c ``` There are no reported fixed by versions.
OSV-2023-1104

Heap-buffer-overflow in bit_read_RC OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63814 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: bit_read_RC bit_read_fixed bit_read_TF ``` There are no reported fixed by versions.
OSV-2023-397

Heap-buffer-overflow in json_write_TF OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58915 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: json_write_TF json_preR13_header_write_private dwg_write_json ``` There are no reported fixed by versions.
OSV-2023-42

Heap-buffer-overflow in bit_read_BB OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55579 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: bit_read_BB dwg_decode_MINSERT_private dwg_decode_MINSERT ``` There are no reported fixed by versions.
OSV-2023-440

Heap-double-free in dwg_free_object OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59428 ``` Crash type: Heap-double-free Crash state: dwg_free_object dwg_free llvmfuzz.c ``` There are no reported fixed by versions.
OSV-2023-452

Heap-buffer-overflow in json_write_TF OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59523 ``` Crash type: Heap-buffer-overflow READ {*} Crash state: json_write_TF dwg_json_LTYPE json_objects_write ``` There are no reported fixed by versions.
OSV-2023-634

Heap-buffer-overflow in bit_read_BB OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60993 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: bit_read_BB bit_read_BS dwg_decode_ATTDEF_private ``` There are no reported fixed by versions.
OSV-2023-758

Heap-double-free in bit_TV_to_utf8 OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61818 ``` Crash type: Heap-double-free Crash state: bit_TV_to_utf8 json_cquote json_header_write_private ``` There are no reported fixed by versions.
OSV-2023-850

Heap-buffer-overflow in bit_TV_to_utf8 OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62363 ``` Crash type: Heap-buffer-overflow WRITE 1 Crash state: bit_TV_to_utf8 json_cquote dwg_json_LAYOUT_private ``` There are no reported fixed by versions.
OSV-2023-894

Heap-double-free in dwg_free_object OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62561 ``` Crash type: Heap-double-free Crash state: dwg_free_object dwg_free llvmfuzz.c ``` There are no reported fixed by versions.
OSV-2023-965

Heap-buffer-overflow in bit_TV_to_utf8 OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62973 ``` Crash type: Heap-buffer-overflow WRITE 1 Crash state: bit_TV_to_utf8 json_cquote dwg_json_TEXT_private ``` There are no reported fixed by versions.
This package is not known to fix any advisories.