OSV-2024-38

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2024-38.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2024-38
Published
2024-01-25T00:03:33.797633Z
Modified
2024-04-27T14:25:53.641813Z
Summary
Heap-buffer-overflow in json_HEADER
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66046

Crash type: Heap-buffer-overflow WRITE 2
Crash state:
json_HEADER
dwg_read_json
llvmfuzz.c
References

Affected packages

OSS-Fuzz / libredwg

Package

Name
libredwg
Purl
pkg:generic/libredwg

Affected ranges

Type
GIT
Repo
https://github.com/LibreDWG/libredwg
Events
Introduced
76baf858da4cdc14bb4f0d8c994f0aa859232cae
Fixed
6f43e71f4cbddf96d47648f36161a9815389b50a

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific

fixed_range 
"7d9fc3da44bbdb60a40d2dabd167341462434362:6f43e71f4cbddf96d47648f36161a9815389b50a"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2024-38.yaml"