Skip to main content
VulnerabilityPublished Updated

dwg_encode_VERTEX_2D · Libredwg: Heap-buffer-overflow

Affects libredwgSource GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 23 Oct 2026, 18:42 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzlibredwgpkg:generic/libredwgOther threatsAffected
  • >=7bda865d59f843e174ac7e14c7dfe25243900956
  • =0.12.4.4522
  • =0.12.4.4527
  • =0.12.4.4530
  • =0.12.4.4533
  • =0.12.4.4535
  • =0.12.4.4542
  • =0.12.4.4544
  • =0.12.4.4545
  • =0.12.4.4548
  • =0.12.4.4550
  • =0.12.4.4553
  • =0.12.4.4566
  • =0.12.4.4567
  • =0.12.4.4572
  • =0.12.4.4583
  • =0.12.4.4590
  • =0.12.4.4598
  • =0.12.4.4601
  • =0.12.4.4606
  • =0.12.4.4607
  • =0.12.4.4608
  • =0.12.4.4613
  • =0.12.4.4615
  • =0.12.4.4635
  • =0.12.4.4637
  • =0.12.4.4641
  • =0.12.4.4643
  • =0.12.4.4647
  • =0.12.4.4652
  • =0.12.4.4654
  • =0.12.4.4658
  • =0.12.4.4660
  • =0.12.4.4668
  • =0.12.5.4669
  • =0.12.5.4678
  • =0.12.5.4685
  • =0.12.5.4690
  • =0.12.5.4693
  • =0.12.5.4695
  • =0.12.5.4697
  • =0.12.5.4700
  • =0.12.5.4709
  • =0.12.5.4712
  • =0.12.5.4715
  • =0.12.5.4722
  • =0.12.5.4724
  • =0.12.5.4726
  • =0.12.5.4731
  • =0.12.5.4735
  • =0.12.5.4739
  • =0.12.5.4741
  • =0.12.5.4743
  • =0.12.5.4748
  • =0.12.5.4750
  • =0.12.5.4756
  • =0.12.5.4760
  • =0.12.5.4763
  • =0.12.5.4765
  • =0.12.5.4772
  • =0.12.5.4776
  • =0.12.5.4780
  • =0.12.5.4784
  • =0.12.5.4787
  • =0.12.5.4797
  • =0.12.5.4803
  • =0.12.5.4805
  • =0.12.5.4815
  • =0.12.5.4820
  • =0.12.5.4823
  • =0.12.5.4825
  • =0.12.5.4831
  • =0.12.5.4833
  • =0.12.5.4835
  • =0.12.5.4837
  • =0.12.5.4838
  • =0.12.5.4852
  • =0.12.5.4859
  • =0.12.5.4865
  • =0.12.5.4873
  • =0.12.5.4881
  • =0.12.5.4885
  • =0.12.5.4887
  • =0.12.5.4890
  • =0.12.5.4893
  • =0.12.5.4896
  • =0.12.5.4911
  • =0.12.5.4913
  • =0.12.5.4915
  • =0.12.5.4925
  • =0.12.5.4931
  • =0.12.5.4934
  • =0.12.5.4937
  • =0.12.5.4943
  • =0.12.5.4944
  • =0.12.5.4945
  • =0.12.5.4959
  • =0.12.5.4969
  • =0.12.5.4998
  • =0.12.5.5001
  • =0.12.5.5002
  • =0.12.5.5004
  • =0.12.5.5007
  • =0.12.5.5010
  • =0.12.5.5016
  • =0.12.5.5024
  • =0.12.5.5028
  • =0.12.5.5030
  • =0.12.5.5035
  • =0.12.5.5040
  • =0.12.5.5044
  • =0.12.5.5046
  • =0.12.5.5050
  • =0.12.5.5052
  • =0.12.5.5060
  • =0.12.5.5061
  • =0.12.5.5066
  • =0.12.5.5085
  • =0.12.5.5091
  • =0.12.5.5092
  • =0.12.5.5093
  • =0.12.5.5094
  • =0.12.5.5095
  • =0.12.5.5097
  • =0.12.5.5101
  • =0.12.5.5103
  • =0.12.5.5104
  • =0.12.5.5111
  • =0.12.5.5122
  • =0.12.5.5135
  • =0.12.5.5137
  • =0.12.5.5140
  • =0.12.5.5142
  • =0.12.5.5161
  • =0.12.5.5163
  • =0.12.5.5169
  • =0.12.5.5170
  • =0.12.5.5178
  • =0.12.5.5179
  • =0.12.5.5182
  • =0.12.5.5183
  • =0.12.5.5184
  • =0.12.5.5185
  • =0.12.5.5186
  • =0.12.5.5195
  • =0.12.5.5203
  • =0.12.5.5206
  • =0.12.5.5207
  • =0.12.5.5227
  • =0.12.5.5245
  • =0.12.5.5249
  • =0.12.5.5256
  • =0.12.5.5269
  • =0.12.5.5270
  • =0.12.5.5271
  • =0.12.5.5288
  • =0.12.5.5314
  • =0.12.5.5320
  • =0.12.5.5329
  • =0.12.5.5333
  • =0.12.5.5334
  • =0.12.5.5340
  • =0.12.5.5342
  • =0.12.5.5344
  • =0.12.5.5348
  • =0.12.5.5353
  • =0.12.5.5356
  • =0.12.5.5364
  • =0.12.5.5377
  • =0.12.5.5385
  • =0.12.5.5391
  • =0.12.5.5393
  • =0.12.5.5395
  • =0.12.5.5396
  • =0.12.5.5405
  • =0.12.5.5411
  • =0.12.5.5415
  • =0.12.5.5417
  • =0.12.5.5422
  • =0.12.5.5429
  • =0.12.5.5432
  • =0.12.5.5435
  • =0.12.5.5439
  • =0.12.5.5442
  • =0.12.5.5445
  • =0.12.5.5454
  • =0.12.5.5458
  • =0.12.5.5462
  • =0.12.5.5465
  • =0.12.5.5469
  • =0.12.5.5471
  • =0.12.5.5473
  • =0.12.5.5474
  • =0.12.5.5487
  • =0.12.5.5494
  • =0.12.5.5504
  • =0.12.5.5506
  • =0.12.5.5513
  • =0.12.5.5516
  • =0.12.5.5518
  • =0.12.5.5521
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46994 ``` Crash type: Heap-buffer-overflow READ 8 Crash state: dwg_encode_VERTEX_2D dwg_encode_add_object dwg_encode ```

References

Community reviews

Loading reviews…