osv-2023-307
Vulnerability from osv_ossfuzz
Published
2023-04-13 14:02
Modified
2026-02-12 14:12
Summary
Heap-buffer-overflow in bit_read_BB
Details
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57911
Crash type: Heap-buffer-overflow READ 1
Crash state:
bit_read_BB
dwg_decode_entity
dwg_decode_OLE2FRAME_private
{
"affected": [
{
"ecosystem_specific": {
"severity": "MEDIUM"
},
"package": {
"ecosystem": "OSS-Fuzz",
"name": "libredwg",
"purl": "pkg:generic/libredwg"
},
"ranges": [
{
"events": [
{
"introduced": "9d068534eb093790d9be1b8aa8ed47cafc7f2285"
}
],
"repo": "https://github.com/LibreDWG/libredwg",
"type": "GIT"
}
],
"versions": [
"0.12.5.4685",
"0.12.5.4690",
"0.12.5.4693",
"0.12.5.4695",
"0.12.5.4697",
"0.12.5.4700",
"0.12.5.4709",
"0.12.5.4712",
"0.12.5.4715",
"0.12.5.4722",
"0.12.5.4724",
"0.12.5.4726",
"0.12.5.4731",
"0.12.5.4735",
"0.12.5.4739",
"0.12.5.4741",
"0.12.5.4743",
"0.12.5.4748",
"0.12.5.4750",
"0.12.5.4756",
"0.12.5.4760",
"0.12.5.4763",
"0.12.5.4765",
"0.12.5.4772",
"0.12.5.4776",
"0.12.5.4780",
"0.12.5.4784",
"0.12.5.4787",
"0.12.5.4797",
"0.12.5.4803",
"0.12.5.4805",
"0.12.5.4815",
"0.12.5.4820",
"0.12.5.4823",
"0.12.5.4825",
"0.12.5.4831",
"0.12.5.4833",
"0.12.5.4835",
"0.12.5.4837",
"0.12.5.4838",
"0.12.5.4852",
"0.12.5.4859",
"0.12.5.4865",
"0.12.5.4873",
"0.12.5.4881",
"0.12.5.4885",
"0.12.5.4887",
"0.12.5.4890",
"0.12.5.4893",
"0.12.5.4896",
"0.12.5.4911",
"0.12.5.4913",
"0.12.5.4915",
"0.12.5.4925",
"0.12.5.4931",
"0.12.5.4934",
"0.12.5.4937",
"0.12.5.4943",
"0.12.5.4944",
"0.12.5.4945",
"0.12.5.4959",
"0.12.5.4969",
"0.12.5.4998",
"0.12.5.5001",
"0.12.5.5002",
"0.12.5.5004",
"0.12.5.5007",
"0.12.5.5010",
"0.12.5.5016",
"0.12.5.5024",
"0.12.5.5028",
"0.12.5.5030",
"0.12.5.5035",
"0.12.5.5040",
"0.12.5.5044",
"0.12.5.5046",
"0.12.5.5050",
"0.12.5.5052",
"0.12.5.5060",
"0.12.5.5061",
"0.12.5.5066",
"0.12.5.5085",
"0.12.5.5091",
"0.12.5.5092",
"0.12.5.5093",
"0.12.5.5094",
"0.12.5.5095",
"0.12.5.5097",
"0.12.5.5101",
"0.12.5.5103",
"0.12.5.5104",
"0.12.5.5111",
"0.12.5.5122",
"0.12.5.5135",
"0.12.5.5137",
"0.12.5.5140",
"0.12.5.5142",
"0.12.5.5161",
"0.12.5.5163",
"0.12.5.5169",
"0.12.5.5170",
"0.12.5.5178",
"0.12.5.5179",
"0.12.5.5182",
"0.12.5.5183",
"0.12.5.5184",
"0.12.5.5185",
"0.12.5.5186",
"0.12.5.5195",
"0.12.5.5203",
"0.12.5.5206",
"0.12.5.5207",
"0.12.5.5227",
"0.12.5.5245",
"0.12.5.5249",
"0.12.5.5256",
"0.12.5.5269",
"0.12.5.5270",
"0.12.5.5271",
"0.12.5.5288",
"0.12.5.5314",
"0.12.5.5320",
"0.12.5.5329",
"0.12.5.5333",
"0.12.5.5334",
"0.12.5.5340",
"0.12.5.5342",
"0.12.5.5344",
"0.12.5.5348",
"0.12.5.5353",
"0.12.5.5356",
"0.12.5.5364",
"0.12.5.5377",
"0.12.5.5385",
"0.12.5.5391",
"0.12.5.5393",
"0.12.5.5395",
"0.12.5.5396",
"0.12.5.5405",
"0.12.5.5411",
"0.12.5.5415",
"0.12.5.5417",
"0.12.5.5422",
"0.12.5.5429",
"0.12.5.5432",
"0.12.5.5435",
"0.12.5.5439",
"0.12.5.5442",
"0.12.5.5445",
"0.12.5.5454",
"0.12.5.5458",
"0.12.5.5462",
"0.12.5.5469",
"0.12.5.5471",
"0.12.5.5473",
"0.12.5.5474",
"0.12.5.5487",
"0.12.5.5494",
"0.12.5.5504",
"0.12.5.5506",
"0.12.5.5513",
"0.12.5.5516",
"0.12.5.5518",
"0.12.5.5521",
"0.12.5.5528",
"0.12.5.5530",
"0.12.5.5537",
"0.12.5.5539",
"0.12.5.5544",
"0.12.5.5546",
"0.12.5.5549",
"0.12.5.5552",
"0.12.5.5554",
"0.12.5.5557",
"0.12.5.5560",
"0.12.5.5563",
"0.12.5.5570",
"0.12.5.5577",
"0.12.5.5584",
"0.12.5.5625",
"0.12.5.5646",
"0.12.5.5648",
"0.12.5.5654",
"0.12.5.5656",
"0.12.5.5660",
"0.12.5.5663",
"0.12.5.5666",
"0.12.5.5667",
"0.12.5.5668",
"0.12.5.5671",
"0.12.5.5688",
"0.12.5.5691",
"0.12.5.5697",
"0.12.5.5700",
"0.12.5.5708",
"0.12.5.5710",
"0.12.5.5712",
"0.12.5.5713",
"0.12.5.5716",
"0.12.5.5720",
"0.12.5.5721",
"0.12.5.5725",
"0.12.5.5731",
"0.12.5.5733",
"0.12.5.5741",
"0.12.5.5745",
"0.12.5.5746",
"0.12.5.5748",
"0.12.5.5751",
"0.12.5.5754",
"0.12.5.5759",
"0.12.5.5761",
"0.12.5.5764",
"0.12.5.5772",
"0.12.5.5779",
"0.12.5.5784",
"0.12.5.5787",
"0.12.5.5789",
"0.12.5.5793",
"0.12.5.5796",
"0.12.5.5799",
"0.12.5.5802",
"0.12.5.5804",
"0.12.5.5806",
"0.12.5.5809",
"0.12.5.5811",
"0.12.5.5813",
"0.12.5.5822",
"0.12.5.5827",
"0.12.5.5830",
"0.12.5.5832",
"0.12.5.5837",
"0.12.5.5845",
"0.12.5.5852",
"0.12.5.5856",
"0.12.5.5859",
"0.12.5.5862",
"0.12.5.5865",
"0.12.5.5870",
"0.12.5.5875",
"0.12.5.5877",
"0.12.5.5882",
"0.12.5.5885",
"0.12.5.5887",
"0.12.5.5889",
"0.12.5.5894",
"0.12.5.5898",
"0.12.5.5903",
"0.12.5.5907",
"0.12.5.5914",
"0.12.5.5915",
"0.12.5.5922",
"0.12.5.5949",
"0.12.5.5953",
"0.12.5.5959",
"0.12.5.5962",
"0.12.5.5968",
"0.12.5.5970",
"0.12.5.5971",
"0.12.5.5975",
"0.12.5.5982",
"0.12.5.6001",
"0.12.5.6004",
"0.12.5.6010",
"0.12.5.6013",
"0.12.5.6016",
"0.12.5.6019",
"0.12.5.6022",
"0.12.5.6023",
"0.12.5.6027",
"0.12.5.6033",
"0.12.5.6037",
"0.12.5.6040",
"0.12.5.6043",
"0.12.5.6044",
"0.12.5.6046",
"0.12.5.6055",
"0.12.5.6057",
"0.12.5.6068",
"0.12.5.6076",
"0.12.5.6077",
"0.12.5.6078",
"0.12.5.6080",
"0.12.5.6090",
"0.12.5.6096",
"0.12.5.6102",
"0.12.5.6109",
"0.12.5.6111",
"0.12.5.6113",
"0.12.5.6116",
"0.12.5.6118",
"0.12.5.6121",
"0.12.5.6127",
"0.12.5.6128",
"0.12.5.6133",
"0.12.5.6135",
"0.12.5.6138",
"0.12.5.6147",
"0.12.5.6149",
"0.12.5.6157",
"0.12.5.6160",
"0.12.5.6162",
"0.12.5.6164",
"0.12.5.6169",
"0.12.5.6171",
"0.12.5.6173",
"0.12.5.6183",
"0.12.5.6187",
"0.12.5.6191",
"0.12.5.6194",
"0.12.5.6199",
"0.12.5.6203",
"0.12.5.6205",
"0.12.5.6209",
"0.12.5.6214",
"0.12.5.6216",
"0.12.5.6220",
"0.12.5.6226",
"0.12.5.6229",
"0.12.5.6231",
"0.12.5.6236",
"0.12.5.6241",
"0.12.5.6243",
"0.12.5.6245",
"0.12.5.6248",
"0.12.5.6253",
"0.12.5.6257",
"0.12.5.6263",
"0.12.5.6269",
"0.12.5.6271",
"0.12.5.6277",
"0.12.5.6279",
"0.12.5.6285",
"0.12.5.6294",
"0.12.5.6302",
"0.12.5.6306",
"0.12.5.6310",
"0.12.5.6313",
"0.12.5.6316",
"0.12.5.6319",
"0.12.5.6321",
"0.12.5.6325",
"0.12.5.6333",
"0.12.5.6342",
"0.12.5.6347",
"0.12.5.6350",
"0.12.5.6355",
"0.12.5.6357",
"0.12.5.6360",
"0.12.5.6362",
"0.12.5.6366",
"0.12.5.6369",
"0.12.5.6374",
"0.12.5.6377",
"0.12.5.6384",
"0.12.5.6388",
"0.12.5.6391",
"0.12.5.6394",
"0.12.5.6399",
"0.12.5.6402",
"0.12.5.6406",
"0.12.5.6417",
"0.12.5.6424",
"0.12.5.6430",
"0.12.5.6432",
"0.12.5.6434",
"0.12.5.6437",
"0.12.5.6439",
"0.12.5.6444",
"0.12.5.6456",
"0.12.5.6459",
"0.12.5.6461",
"0.12.5.6465",
"0.12.5.6468",
"0.12.5.6479",
"0.12.5.6483",
"0.12.5.6488",
"0.12.5.6493",
"0.12.5.6495",
"0.12.5.6501",
"0.12.5.6511",
"0.12.5.6513",
"0.12.5.6517",
"0.12.5.6527",
"0.12.5.6533",
"0.12.5.6534",
"0.12.5.6539",
"0.12.5.6543",
"0.12.5.6548",
"0.12.5.6550",
"0.12.5.6564",
"0.12.5.6573",
"0.12.5.6578",
"0.12.5.6582",
"0.12.5.6585",
"0.12.5.6588",
"0.12.5.6597",
"0.12.5.6599",
"0.12.5.6605",
"0.12.5.6609",
"0.12.5.6612",
"0.12.5.6619",
"0.12.5.6622",
"0.12.5.6627",
"0.12.5.6630",
"0.12.5.6638",
"0.12.5.6640",
"0.12.5.6652",
"0.12.5.6653",
"0.12.5.6661",
"0.12.5.6664",
"0.12.5.6670",
"0.12.5.6677",
"0.12.5.6682",
"0.12.5.6688",
"0.12.5.6697",
"0.12.5.6701",
"0.12.5.6709",
"0.12.5.6714",
"0.12.5.6717",
"0.12.5.6726",
"0.12.5.6735",
"0.12.5.6739",
"0.12.5.6754",
"0.12.5.6756",
"0.12.5.6768",
"0.12.5.6776",
"0.12.5.6785",
"0.12.5.6792",
"0.12.5.6802",
"0.12.5.6811",
"0.12.5.6819",
"0.12.5.6828",
"0.12.5.6836",
"0.12.5.6843",
"0.12.5.6851",
"0.12.5.6865",
"0.12.5.6872",
"0.12.5.6891",
"0.12.5.6912",
"0.12.5.6915",
"0.12.5.6924",
"0.12.5.6926",
"0.12.5.6932",
"0.12.5.6938",
"0.12.5.6939",
"0.12.5.6945",
"0.12.5.6948",
"0.12.5.6953",
"0.12.5.6958",
"0.12.5.6962",
"0.12.5.6971",
"0.12.5.6973",
"0.12.5.6979",
"0.12.5.6984",
"0.12.5.6987",
"0.12.5.6992",
"0.12.5.5465",
"0.12.5.6996",
"0.13",
"0.13.0.7003",
"0.13.0.7011",
"0.13.0.7013",
"0.13.0.7031",
"0.13.0.7036",
"0.13.0.7045",
"0.13.0.7047",
"0.13.0.7050",
"0.13.0.7060",
"0.13.0.7066",
"0.13.0.7072",
"0.13.0.7081",
"0.13.1",
"0.13.1.7087",
"0.13.2",
"0.13.2.7111",
"0.13.2.7114",
"0.13.2.7117",
"0.13.2.7125",
"0.13.2.7142",
"0.13.2.7151",
"0.13.2.7153",
"0.13.2.7154",
"0.13.3",
"0.13.3.7163",
"0.13.3.7165",
"0.13.3.7166",
"0.13.3.7168",
"0.13.3.7176",
"0.13.3.7183",
"0.13.3.7186",
"0.13.3.7187",
"0.13.3.7190",
"0.13.3.7199",
"0.13.3.7217",
"0.13.3.7220",
"0.13.3.7223",
"0.13.3.7224",
"0.13.3.7225",
"0.13.3.7226",
"0.13.3.7227",
"0.13.3.7233",
"0.13.3.7240",
"0.13.3.7246",
"0.13.3.7251",
"0.13.3.7257",
"0.13.3.7259",
"0.13.3.7262",
"0.13.3.7264",
"0.13.3.7265",
"0.13.3.7268",
"0.13.3.7270",
"0.13.3.7273",
"0.13.3.7298",
"0.13.3.7306",
"0.13.3.7308",
"0.13.3.7311",
"0.13.3.7320",
"0.13.3.7324",
"0.13.3.7327",
"0.13.3.7338",
"0.13.3.7341",
"0.13.3.7344",
"0.13.3.7345",
"0.13.3.7351",
"0.13.3.7371",
"0.13.3.7377",
"0.13.3.7385",
"0.13.3.7405",
"0.13.3.7409",
"0.13.3.7411",
"0.13.3.7412",
"0.13.3.7414",
"0.13.3.7420",
"0.13.3.7424",
"0.13.3.7426",
"0.13.3.7429",
"0.13.3.7431",
"0.13.3.7434",
"0.13.3.7437",
"0.13.3.7442",
"0.13.3.7445",
"0.13.3.7453",
"0.13.3.7456",
"0.13.3.7460",
"0.13.3.7466",
"0.13.3.7469",
"0.13.3.7472",
"0.13.3.7473",
"0.13.3.7483",
"0.13.3.7491",
"0.13.3.7501",
"0.13.3.7507",
"0.13.3.7516",
"0.13.3.7533",
"0.13.3.7534",
"0.13.3.7535",
"0.13.3.7539",
"0.13.3.7545",
"0.13.3.7551",
"0.13.3.7552",
"0.13.3.7554",
"0.13.3.7557",
"0.13.3.7558",
"0.13.3.7562",
"0.13.3.7571",
"0.13.3.7574",
"0.13.3.7577",
"0.13.3.7582",
"0.13.3.7599",
"0.13.3.7600",
"0.13.3.7603",
"0.13.3.7635",
"0.13.3.7637",
"0.13.3.7640",
"0.13.3.7646",
"0.13.3.7649",
"0.13.3.7650",
"0.13.3.7657",
"0.13.3.7663",
"0.13.3.7665",
"0.13.3.7675",
"0.13.3.7680",
"0.13.3.7685",
"0.13.3.7686",
"0.13.3.7690",
"0.13.3.7696",
"0.13.3.7702",
"0.13.3.7715",
"0.13.3.7721",
"0.13.3.7727",
"0.13.3.7730",
"0.13.3.7737",
"0.13.3.7741",
"0.13.3.7743",
"0.13.3.7752",
"0.13.3.7761",
"0.13.3.7763",
"0.13.3.7772",
"0.13.3.7776",
"0.13.3.7778",
"0.13.3.7789",
"0.13.3.7792",
"0.13.3.7794",
"0.13.3.7797",
"0.13.3.7802",
"0.13.3.7805",
"0.13.3.7808",
"0.13.3.7810",
"0.13.3.7812",
"0.13.3.7813",
"0.13.3.7816",
"0.13.3.7819",
"0.13.3.7825",
"0.13.3.7828",
"0.13.3.7835",
"0.13.3.7842",
"0.13.3.7846",
"0.13.3.7848",
"0.13.3.7849",
"0.13.3.7850",
"0.13.3.7851",
"0.13.3.7852",
"0.13.3.7861",
"0.13.3.7867",
"0.13.3.7873",
"0.13.3.7883",
"0.13.3.7897",
"0.13.3.7901",
"0.13.3.7906"
]
}
],
"details": "OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57911\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nbit_read_BB\ndwg_decode_entity\ndwg_decode_OLE2FRAME_private\n```\n",
"id": "OSV-2023-307",
"modified": "2026-02-12T14:12:00.262856Z",
"published": "2023-04-13T14:02:09.774988Z",
"references": [
{
"type": "REPORT",
"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57911"
}
],
"schema_version": "1.4.0",
"summary": "Heap-buffer-overflow in bit_read_BB"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…