Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:generic/libredwg@0.13.3%2B7240
purl pkg:generic/libredwg@0.13.3%2B7240
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
OSV-2022-1259

Heap-buffer-overflow in dwg_decode_INSERT_private OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54228 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: dwg_decode_INSERT_private dwg_decode_INSERT dwg_decode_add_object ``` There are no reported fixed by versions.
OSV-2023-1267

Heap-buffer-overflow in dwg_free_object OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64829 ``` Crash type: Heap-buffer-overflow READ 8 Crash state: dwg_free_object dwg_free llvmfuzz.c ``` There are no reported fixed by versions.
OSV-2024-384

Heap-use-after-free in json_fixed_string OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=67528 ``` Crash type: Heap-use-after-free WRITE 11 Crash state: json_fixed_string json_RNUMBER_Header dwg_read_json ``` There are no reported fixed by versions.
This package is not known to fix any advisories.