OSV-2023-1048

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2023-1048.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2023-1048
Published
2023-10-22T13:01:31.381359Z
Modified
2023-10-22T13:01:31.381601Z
Summary
Heap-buffer-overflow in decode_preR13_entities
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63463

Crash type: Heap-buffer-overflow READ 1
Crash state:
decode_preR13_entities
decode_preR13
dwg_decode
References

Affected packages

OSS-Fuzz / libredwg

Package

Name
libredwg
Purl
pkg:generic/libredwg

Affected ranges

Type
GIT
Repo
https://github.com/LibreDWG/libredwg
Events
Introduced
1760559320f27e75d86c9e6edab467bab63d58e9
Fixed
ebe9ce3797a524793217acbc3f54e404745d91d3

Affected versions

0.*

0.12.5.6430
0.12.5.6432
0.12.5.6434
0.12.5.6437
0.12.5.6439
0.12.5.6444
0.12.5.6456
0.12.5.6459
0.12.5.6461

Ecosystem specific 

{
    "severity": "MEDIUM"
}