OSV-2021-495

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2021-495.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2021-495
Published
2021-03-06T00:00:08.738235Z
Modified
2022-04-13T03:04:41.065051Z
Summary
Heap-double-free in bit_chain_free
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31724

Crash type: Heap-double-free
Crash state:
bit_chain_free
dwg_encode_MTEXT
dwg_encode_add_object
References

Affected packages

OSS-Fuzz / libredwg

Package

Name
libredwg
Purl
pkg:generic/libredwg

Affected ranges

Type
GIT
Repo
https://github.com/LibreDWG/libredwg
Events
Introduced
749923e4dfaf9b32e13282325decd78595a60c95
Fixed
9b6e0ff9ef02818df034fc42c3bd149a5ff89342

Affected versions

0.*

0.12.3.4163
0.12.3.4165
0.12.3.4167
0.12.3.4173
0.12.3.4176
0.12.3.4178
0.12.3.4180
0.12.3.4185
0.12.3.4189
0.12.3.4191

Ecosystem specific 

{
    "severity": "HIGH"
}