osv-2022-1251
Vulnerability from osv_ossfuzz
Published
2022-12-10 13:00
Modified
2023-11-01 14:13
Summary
Heap-buffer-overflow in bit_read_B
Details
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54162
Crash type: Heap-buffer-overflow READ 1
Crash state:
bit_read_B
dwg_decode_header_variables
decode_R13_RNUMBER
{
"affected": [
{
"database_specific": {
"fixed_range": "b92d26a26e31b3b6c117b2d80c5ee1c8248e247f:119ef50a0b1ef395defa5ee453acd5d3c158c638"
},
"ecosystem_specific": {
"severity": "MEDIUM"
},
"package": {
"ecosystem": "OSS-Fuzz",
"name": "libredwg",
"purl": "pkg:generic/libredwg"
},
"ranges": [
{
"events": [
{
"introduced": "9d068534eb093790d9be1b8aa8ed47cafc7f2285"
},
{
"fixed": "119ef50a0b1ef395defa5ee453acd5d3c158c638"
}
],
"repo": "https://github.com/LibreDWG/libredwg",
"type": "GIT"
}
],
"versions": [
"0.12.5.4685",
"0.12.5.4690",
"0.12.5.4693",
"0.12.5.4695",
"0.12.5.4697",
"0.12.5.4700",
"0.12.5.4709",
"0.12.5.4712",
"0.12.5.4715",
"0.12.5.4722",
"0.12.5.4724",
"0.12.5.4726",
"0.12.5.4731",
"0.12.5.4735",
"0.12.5.4739",
"0.12.5.4741",
"0.12.5.4743",
"0.12.5.4748",
"0.12.5.4750",
"0.12.5.4756",
"0.12.5.4760",
"0.12.5.4763",
"0.12.5.4765",
"0.12.5.4772",
"0.12.5.4776",
"0.12.5.4780",
"0.12.5.4784",
"0.12.5.4787",
"0.12.5.4797",
"0.12.5.4803",
"0.12.5.4805",
"0.12.5.4815",
"0.12.5.4820",
"0.12.5.4823",
"0.12.5.4825",
"0.12.5.4831",
"0.12.5.4833",
"0.12.5.4835",
"0.12.5.4837",
"0.12.5.4838",
"0.12.5.4852",
"0.12.5.4859",
"0.12.5.4865",
"0.12.5.4873",
"0.12.5.4881",
"0.12.5.4885",
"0.12.5.4887",
"0.12.5.4890",
"0.12.5.4893",
"0.12.5.4896",
"0.12.5.4911",
"0.12.5.4913",
"0.12.5.4915",
"0.12.5.4925",
"0.12.5.4931",
"0.12.5.4934",
"0.12.5.4937",
"0.12.5.4943",
"0.12.5.4944",
"0.12.5.4945",
"0.12.5.4959",
"0.12.5.4969",
"0.12.5.4998",
"0.12.5.5001",
"0.12.5.5002",
"0.12.5.5004",
"0.12.5.5007",
"0.12.5.5010",
"0.12.5.5016",
"0.12.5.5024",
"0.12.5.5028",
"0.12.5.5030",
"0.12.5.5035",
"0.12.5.5040",
"0.12.5.5044",
"0.12.5.5046",
"0.12.5.5050",
"0.12.5.5052",
"0.12.5.5060",
"0.12.5.5061",
"0.12.5.5066",
"0.12.5.5085",
"0.12.5.5091",
"0.12.5.5092",
"0.12.5.5093",
"0.12.5.5094",
"0.12.5.5095",
"0.12.5.5097",
"0.12.5.5101",
"0.12.5.5103",
"0.12.5.5104",
"0.12.5.5111",
"0.12.5.5122",
"0.12.5.5135",
"0.12.5.5137",
"0.12.5.5140",
"0.12.5.5142",
"0.12.5.5161",
"0.12.5.5163",
"0.12.5.5169",
"0.12.5.5170",
"0.12.5.5178",
"0.12.5.5179",
"0.12.5.5182",
"0.12.5.5183",
"0.12.5.5184",
"0.12.5.5185",
"0.12.5.5186",
"0.12.5.5195",
"0.12.5.5203",
"0.12.5.5206",
"0.12.5.5207",
"0.12.5.5227",
"0.12.5.5245",
"0.12.5.5249",
"0.12.5.5256",
"0.12.5.5269",
"0.12.5.5270",
"0.12.5.5271",
"0.12.5.5288",
"0.12.5.5314",
"0.12.5.5320",
"0.12.5.5329",
"0.12.5.5333",
"0.12.5.5334",
"0.12.5.5340",
"0.12.5.5342",
"0.12.5.5344",
"0.12.5.5348",
"0.12.5.5353",
"0.12.5.5356",
"0.12.5.5364",
"0.12.5.5377",
"0.12.5.5385",
"0.12.5.5391",
"0.12.5.5393",
"0.12.5.5395",
"0.12.5.5396",
"0.12.5.5405",
"0.12.5.5411",
"0.12.5.5415",
"0.12.5.5417",
"0.12.5.5422",
"0.12.5.5429",
"0.12.5.5432",
"0.12.5.5435",
"0.12.5.5439",
"0.12.5.5442",
"0.12.5.5445",
"0.12.5.5454",
"0.12.5.5458",
"0.12.5.5462",
"0.12.5.5469",
"0.12.5.5471",
"0.12.5.5473",
"0.12.5.5474",
"0.12.5.5487",
"0.12.5.5494",
"0.12.5.5504",
"0.12.5.5506",
"0.12.5.5513",
"0.12.5.5516",
"0.12.5.5518",
"0.12.5.5521",
"0.12.5.5528",
"0.12.5.5530",
"0.12.5.5537",
"0.12.5.5539",
"0.12.5.5544",
"0.12.5.5546",
"0.12.5.5549",
"0.12.5.5552",
"0.12.5.5554",
"0.12.5.5557",
"0.12.5.5560",
"0.12.5.5563",
"0.12.5.5570",
"0.12.5.5577",
"0.12.5.5584",
"0.12.5.5625",
"0.12.5.5646",
"0.12.5.5648",
"0.12.5.5654",
"0.12.5.5656",
"0.12.5.5660",
"0.12.5.5663",
"0.12.5.5666",
"0.12.5.5667",
"0.12.5.5668",
"0.12.5.5671",
"0.12.5.5688",
"0.12.5.5691",
"0.12.5.5697",
"0.12.5.5700",
"0.12.5.5708",
"0.12.5.5710",
"0.12.5.5712",
"0.12.5.5713",
"0.12.5.5716",
"0.12.5.5720",
"0.12.5.5721",
"0.12.5.5725",
"0.12.5.5731",
"0.12.5.5733",
"0.12.5.5741",
"0.12.5.5745",
"0.12.5.5746",
"0.12.5.5748",
"0.12.5.5751",
"0.12.5.5754",
"0.12.5.5759",
"0.12.5.5761",
"0.12.5.5764",
"0.12.5.5772",
"0.12.5.5779",
"0.12.5.5784",
"0.12.5.5787",
"0.12.5.5789",
"0.12.5.5793",
"0.12.5.5796",
"0.12.5.5799",
"0.12.5.5802",
"0.12.5.5804",
"0.12.5.5806",
"0.12.5.5809",
"0.12.5.5811",
"0.12.5.5813",
"0.12.5.5822",
"0.12.5.5827",
"0.12.5.5830",
"0.12.5.5832",
"0.12.5.5837",
"0.12.5.5845",
"0.12.5.5852",
"0.12.5.5856",
"0.12.5.5859",
"0.12.5.5862",
"0.12.5.5865",
"0.12.5.5870",
"0.12.5.5875",
"0.12.5.5877",
"0.12.5.5882",
"0.12.5.5885",
"0.12.5.5887",
"0.12.5.5889",
"0.12.5.5894",
"0.12.5.5898",
"0.12.5.5903",
"0.12.5.5907",
"0.12.5.5914",
"0.12.5.5915",
"0.12.5.5922",
"0.12.5.5949",
"0.12.5.5953",
"0.12.5.5959",
"0.12.5.5962",
"0.12.5.5968",
"0.12.5.5970",
"0.12.5.5971",
"0.12.5.5975",
"0.12.5.5982",
"0.12.5.6001",
"0.12.5.6004",
"0.12.5.6010",
"0.12.5.6013",
"0.12.5.6016",
"0.12.5.6019",
"0.12.5.6022",
"0.12.5.6023",
"0.12.5.6027",
"0.12.5.6033",
"0.12.5.6037",
"0.12.5.6040",
"0.12.5.6043",
"0.12.5.6044",
"0.12.5.6046",
"0.12.5.6055",
"0.12.5.6057",
"0.12.5.6068",
"0.12.5.6076",
"0.12.5.6077",
"0.12.5.6078",
"0.12.5.6080",
"0.12.5.6090",
"0.12.5.6096",
"0.12.5.6102",
"0.12.5.6109",
"0.12.5.6111",
"0.12.5.6113",
"0.12.5.6116",
"0.12.5.6118",
"0.12.5.6121",
"0.12.5.6127",
"0.12.5.6128",
"0.12.5.6133",
"0.12.5.6135",
"0.12.5.6138",
"0.12.5.6147",
"0.12.5.6149",
"0.12.5.6157",
"0.12.5.6160",
"0.12.5.6162",
"0.12.5.6164",
"0.12.5.6169",
"0.12.5.6171",
"0.12.5.6173",
"0.12.5.6183",
"0.12.5.6187",
"0.12.5.6191",
"0.12.5.6194",
"0.12.5.6199",
"0.12.5.6203",
"0.12.5.6205",
"0.12.5.6209",
"0.12.5.6214",
"0.12.5.6216",
"0.12.5.6220",
"0.12.5.6226",
"0.12.5.6229",
"0.12.5.6231",
"0.12.5.6236",
"0.12.5.6241",
"0.12.5.6243",
"0.12.5.6245",
"0.12.5.6248",
"0.12.5.6253",
"0.12.5.6257",
"0.12.5.6263",
"0.12.5.6269",
"0.12.5.6271",
"0.12.5.6277",
"0.12.5.6279",
"0.12.5.6285",
"0.12.5.6294",
"0.12.5.6302",
"0.12.5.6306",
"0.12.5.6310",
"0.12.5.6313",
"0.12.5.6316",
"0.12.5.6319",
"0.12.5.6321",
"0.12.5.6325",
"0.12.5.6333",
"0.12.5.6342",
"0.12.5.6347",
"0.12.5.6350",
"0.12.5.6355",
"0.12.5.6357",
"0.12.5.6360",
"0.12.5.6362",
"0.12.5.6366",
"0.12.5.6369",
"0.12.5.6374",
"0.12.5.6377",
"0.12.5.6384",
"0.12.5.6388",
"0.12.5.6391",
"0.12.5.6394",
"0.12.5.6399",
"0.12.5.6402",
"0.12.5.6406",
"0.12.5.6417",
"0.12.5.6424",
"0.12.5.6430",
"0.12.5.6432",
"0.12.5.6434",
"0.12.5.6437",
"0.12.5.6439",
"0.12.5.6444",
"0.12.5.6456",
"0.12.5.6459",
"0.12.5.6461",
"0.12.5.6465",
"0.12.5.6468",
"0.12.5.6479",
"0.12.5.6483",
"0.12.5.6488",
"0.12.5.6493",
"0.12.5.6495",
"0.12.5.6501",
"0.12.5.6511"
]
}
],
"details": "OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54162\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nbit_read_B\ndwg_decode_header_variables\ndecode_R13_RNUMBER\n```\n",
"id": "OSV-2022-1251",
"modified": "2023-11-01T14:13:21.808323Z",
"published": "2022-12-10T13:00:16.385102Z",
"references": [
{
"type": "REPORT",
"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54162"
}
],
"schema_version": "1.3.0",
"summary": "Heap-buffer-overflow in bit_read_B"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…