OSV-2023-1051

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2023-1051.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2023-1051
Published
2023-10-23T13:00:32.282560Z
Modified
2023-10-23T13:00:32.282807Z
Summary
Heap-buffer-overflow in dwg_json_VPORT_private
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63483

Crash type: Heap-buffer-overflow READ 1
Crash state:
dwg_json_VPORT_private
json_objects_write
dwg_write_json
References

Affected packages

OSS-Fuzz / libredwg

Package

Name
libredwg
Purl
pkg:generic/libredwg

Affected ranges

Type
GIT
Repo
https://github.com/LibreDWG/libredwg
Events
Introduced
2584efe46a41eae2c41f2d936286c7785093eb04
Fixed
5b4c2fce7262b2bec00fa679e472559ab268d0c7

Affected versions

0.*

0.12.5.6430
0.12.5.6432
0.12.5.6434
0.12.5.6437
0.12.5.6439
0.12.5.6444
0.12.5.6456
0.12.5.6459
0.12.5.6461
0.12.5.6465
0.12.5.6468
0.12.5.6479
0.12.5.6483

Ecosystem specific 

{
    "severity": "MEDIUM"
}