osv-2023-42
Vulnerability from osv_ossfuzz
Published
2023-02-02 13:00
Modified
2023-12-16 14:20
Summary
Heap-buffer-overflow in bit_read_BB
Details
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55579
Crash type: Heap-buffer-overflow READ 1
Crash state:
bit_read_BB
dwg_decode_MINSERT_private
dwg_decode_MINSERT
{
"affected": [
{
"ecosystem_specific": {
"severity": "MEDIUM"
},
"package": {
"ecosystem": "OSS-Fuzz",
"name": "libredwg",
"purl": "pkg:generic/libredwg"
},
"ranges": [
{
"events": [
{
"introduced": "ae09b9b7b51bda4a719279a6ade6dadeaf5ef39f"
},
{
"fixed": "02fd447dbbcc68d6e3cf819ccc0f8fb6c9bb07aa"
}
],
"repo": "https://github.com/LibreDWG/libredwg",
"type": "GIT"
}
],
"versions": [
"0.12.5.5016",
"0.12.5.5024",
"0.12.5.5028",
"0.12.5.5030",
"0.12.5.5035",
"0.12.5.5040",
"0.12.5.5044",
"0.12.5.5046",
"0.12.5.5050",
"0.12.5.5052",
"0.12.5.5060",
"0.12.5.5061",
"0.12.5.5066",
"0.12.5.5085",
"0.12.5.5091",
"0.12.5.5092",
"0.12.5.5093",
"0.12.5.5094",
"0.12.5.5095",
"0.12.5.5097",
"0.12.5.5101",
"0.12.5.5103",
"0.12.5.5104",
"0.12.5.5111",
"0.12.5.5122",
"0.12.5.5135",
"0.12.5.5137",
"0.12.5.5140",
"0.12.5.5142",
"0.12.5.5161",
"0.12.5.5163",
"0.12.5.5169",
"0.12.5.5170",
"0.12.5.5178",
"0.12.5.5179",
"0.12.5.5182",
"0.12.5.5183",
"0.12.5.5184",
"0.12.5.5185",
"0.12.5.5186",
"0.12.5.5195",
"0.12.5.5203",
"0.12.5.5206",
"0.12.5.5207",
"0.12.5.5227",
"0.12.5.5245",
"0.12.5.5249",
"0.12.5.5256",
"0.12.5.5269",
"0.12.5.5270",
"0.12.5.5271",
"0.12.5.5288",
"0.12.5.5314",
"0.12.5.5320",
"0.12.5.5329",
"0.12.5.5333",
"0.12.5.5334",
"0.12.5.5340",
"0.12.5.5342",
"0.12.5.5344",
"0.12.5.5348",
"0.12.5.5353",
"0.12.5.5356",
"0.12.5.5364",
"0.12.5.5377",
"0.12.5.5385",
"0.12.5.5391",
"0.12.5.5393",
"0.12.5.5395",
"0.12.5.5396",
"0.12.5.5405",
"0.12.5.5411",
"0.12.5.5415",
"0.12.5.5417",
"0.12.5.5422",
"0.12.5.5429",
"0.12.5.5432",
"0.12.5.5435",
"0.12.5.5439",
"0.12.5.5442",
"0.12.5.5445",
"0.12.5.5454",
"0.12.5.5458",
"0.12.5.5462",
"0.12.5.5469",
"0.12.5.5471",
"0.12.5.5473",
"0.12.5.5474",
"0.12.5.5487",
"0.12.5.5494",
"0.12.5.5504",
"0.12.5.5506",
"0.12.5.5513",
"0.12.5.5516",
"0.12.5.5518",
"0.12.5.5521",
"0.12.5.5528",
"0.12.5.5530",
"0.12.5.5537",
"0.12.5.5539",
"0.12.5.5544",
"0.12.5.5546",
"0.12.5.5549",
"0.12.5.5552",
"0.12.5.5554",
"0.12.5.5557",
"0.12.5.5560",
"0.12.5.5563",
"0.12.5.5570",
"0.12.5.5577",
"0.12.5.5584",
"0.12.5.5625",
"0.12.5.5646",
"0.12.5.5648",
"0.12.5.5654",
"0.12.5.5656",
"0.12.5.5660",
"0.12.5.5663",
"0.12.5.5666",
"0.12.5.5667",
"0.12.5.5668",
"0.12.5.5671",
"0.12.5.5688",
"0.12.5.5691",
"0.12.5.5697",
"0.12.5.5700",
"0.12.5.5708",
"0.12.5.5710",
"0.12.5.5712",
"0.12.5.5713",
"0.12.5.5716",
"0.12.5.5720",
"0.12.5.5721",
"0.12.5.5725",
"0.12.5.5731",
"0.12.5.5733",
"0.12.5.5741",
"0.12.5.5745",
"0.12.5.5746",
"0.12.5.5748",
"0.12.5.5751",
"0.12.5.5754",
"0.12.5.5759",
"0.12.5.5761",
"0.12.5.5764",
"0.12.5.5772",
"0.12.5.5779",
"0.12.5.5784",
"0.12.5.5787",
"0.12.5.5789",
"0.12.5.5793",
"0.12.5.5796",
"0.12.5.5799",
"0.12.5.5802",
"0.12.5.5804",
"0.12.5.5806",
"0.12.5.5809",
"0.12.5.5811",
"0.12.5.5813",
"0.12.5.5822",
"0.12.5.5827",
"0.12.5.5830",
"0.12.5.5832",
"0.12.5.5837",
"0.12.5.5845",
"0.12.5.5852",
"0.12.5.5856",
"0.12.5.5859",
"0.12.5.5862",
"0.12.5.5865",
"0.12.5.5870",
"0.12.5.5875",
"0.12.5.5877",
"0.12.5.5882",
"0.12.5.5885",
"0.12.5.5887",
"0.12.5.5889",
"0.12.5.5894",
"0.12.5.5898",
"0.12.5.5903",
"0.12.5.5907",
"0.12.5.5914",
"0.12.5.5915",
"0.12.5.5922",
"0.12.5.5949",
"0.12.5.5953",
"0.12.5.5959",
"0.12.5.5962",
"0.12.5.5968",
"0.12.5.5970",
"0.12.5.5971",
"0.12.5.5975",
"0.12.5.5982",
"0.12.5.6001",
"0.12.5.6004",
"0.12.5.6010",
"0.12.5.6013",
"0.12.5.6016",
"0.12.5.6019",
"0.12.5.6022",
"0.12.5.6023",
"0.12.5.6027",
"0.12.5.6033",
"0.12.5.6037",
"0.12.5.6040",
"0.12.5.6043",
"0.12.5.6044",
"0.12.5.6046",
"0.12.5.6055",
"0.12.5.6057",
"0.12.5.6068",
"0.12.5.6076",
"0.12.5.6077",
"0.12.5.6078",
"0.12.5.6080",
"0.12.5.6090",
"0.12.5.6096",
"0.12.5.6102",
"0.12.5.6109",
"0.12.5.6111",
"0.12.5.6113",
"0.12.5.6116",
"0.12.5.6118",
"0.12.5.6121",
"0.12.5.6127",
"0.12.5.6128",
"0.12.5.6133",
"0.12.5.6135",
"0.12.5.6138",
"0.12.5.6147",
"0.12.5.6149",
"0.12.5.6157",
"0.12.5.6160",
"0.12.5.6162",
"0.12.5.6164",
"0.12.5.6169",
"0.12.5.6171",
"0.12.5.6173",
"0.12.5.6183",
"0.12.5.6187",
"0.12.5.6191",
"0.12.5.6194",
"0.12.5.6199",
"0.12.5.6203",
"0.12.5.6205",
"0.12.5.6209",
"0.12.5.6214",
"0.12.5.6216",
"0.12.5.6220",
"0.12.5.6226",
"0.12.5.6229",
"0.12.5.6231",
"0.12.5.6236",
"0.12.5.6241",
"0.12.5.6243",
"0.12.5.6245",
"0.12.5.6248",
"0.12.5.6253",
"0.12.5.6257",
"0.12.5.6263",
"0.12.5.6269",
"0.12.5.6271",
"0.12.5.6277",
"0.12.5.6279",
"0.12.5.6285",
"0.12.5.6294",
"0.12.5.6302",
"0.12.5.6306",
"0.12.5.6310",
"0.12.5.6313",
"0.12.5.6316",
"0.12.5.6319",
"0.12.5.6321",
"0.12.5.6325",
"0.12.5.6333",
"0.12.5.6342",
"0.12.5.6347",
"0.12.5.6350",
"0.12.5.6355",
"0.12.5.6357",
"0.12.5.6360",
"0.12.5.6362",
"0.12.5.6366",
"0.12.5.6369",
"0.12.5.6374",
"0.12.5.6377",
"0.12.5.6384",
"0.12.5.6388",
"0.12.5.6391",
"0.12.5.6394",
"0.12.5.6399",
"0.12.5.6402",
"0.12.5.6406",
"0.12.5.6417",
"0.12.5.6424",
"0.12.5.6430",
"0.12.5.6432",
"0.12.5.6434",
"0.12.5.6437",
"0.12.5.6439",
"0.12.5.6444",
"0.12.5.6456",
"0.12.5.6459",
"0.12.5.6461",
"0.12.5.6465",
"0.12.5.6468",
"0.12.5.6479",
"0.12.5.6483",
"0.12.5.6488",
"0.12.5.6493",
"0.12.5.6495",
"0.12.5.6501",
"0.12.5.6511",
"0.12.5.6513",
"0.12.5.6517",
"0.12.5.6527",
"0.12.5.6533",
"0.12.5.6534",
"0.12.5.6539",
"0.12.5.6543",
"0.12.5.6548",
"0.12.5.6550",
"0.12.5.6564",
"0.12.5.6573",
"0.12.5.6578",
"0.12.5.6582",
"0.12.5.6585",
"0.12.5.6588",
"0.12.5.6597",
"0.12.5.6599",
"0.12.5.6605",
"0.12.5.6609",
"0.12.5.6612",
"0.12.5.6619",
"0.12.5.6622",
"0.12.5.6627",
"0.12.5.6630",
"0.12.5.6638",
"0.12.5.6640",
"0.12.5.6652",
"0.12.5.6653",
"0.12.5.6661",
"0.12.5.6664",
"0.12.5.6670",
"0.12.5.6677",
"0.12.5.6682",
"0.12.5.6688",
"0.12.5.6697",
"0.12.5.6701",
"0.12.5.6709",
"0.12.5.6714",
"0.12.5.6717",
"0.12.5.6726",
"0.12.5.6735",
"0.12.5.6739",
"0.12.5.6754"
]
}
],
"details": "OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55579\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nbit_read_BB\ndwg_decode_MINSERT_private\ndwg_decode_MINSERT\n```\n",
"id": "OSV-2023-42",
"modified": "2023-12-16T14:20:07.644053Z",
"published": "2023-02-02T13:00:40.999896Z",
"references": [
{
"type": "REPORT",
"url": "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55579"
}
],
"schema_version": "1.4.0",
"summary": "Heap-buffer-overflow in bit_read_BB"
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…