OSV-2023-1110

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2023-1110.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2023-1110
Published
2023-11-04T13:01:06.700754Z
Modified
2023-11-04T13:01:06.701003Z
Summary
Stack-buffer-overflow in dynapi_set_helper
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63824

Crash type: Stack-buffer-overflow READ {*}
Crash state:
dynapi_set_helper
dwg_dynapi_header_set_value
json_HEADER
References

Affected packages

OSS-Fuzz / libredwg

Package

Name
libredwg
Purl
pkg:generic/libredwg

Affected ranges

Type
GIT
Repo
https://github.com/LibreDWG/libredwg
Events

Affected versions

0.*

0.12.5.6384
0.12.5.6388
0.12.5.6391
0.12.5.6394
0.12.5.6399
0.12.5.6402
0.12.5.6406
0.12.5.6417
0.12.5.6424
0.12.5.6430
0.12.5.6432
0.12.5.6434
0.12.5.6437
0.12.5.6439
0.12.5.6444
0.12.5.6456
0.12.5.6459
0.12.5.6461
0.12.5.6465
0.12.5.6468
0.12.5.6479
0.12.5.6483
0.12.5.6488
0.12.5.6493
0.12.5.6495
0.12.5.6501
0.12.5.6511
0.12.5.6513
0.12.5.6517
0.12.5.6527
0.12.5.6533
0.12.5.6534
0.12.5.6539
0.12.5.6543
0.12.5.6548
0.12.5.6550

Ecosystem specific

{
    "severity": "MEDIUM"
}