Libredwg: Heap-buffer-overflow
Affects libredwgSource GCVE Database
0
Severity
MediumRated Medium by Threat Radar's AI analysis
Data as of 27 Oct 2026, 15:15 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| OSS-Fuzzlibredwg | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
Description
A heap-buffer-overflow vulnerability was identified in the get_next_owned_entity function of libredwg, as reported by OSS-Fuzz. The issue involves an out-of-bounds read of 8 bytes, leading to a crash during processing. Multiple specific versions of libredwg 0.12.4 and the 0.12.5-pre release are affected.
References
Community reviews
Loading reviews…