OSV-2022-657

    Dashboard / Vulnerabilities / OSV-2022-657

    OSV-2022-657

    Published: 31 Jul 2022Last Modified: 13 Jan 2023

    Summary: Heap-buffer-overflow in dynapi_set_helper

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49613 ``` Crash type: Heap-buffer-overflow WRITE {*} Crash state: dynapi_set_helper dwg_dynapi_entity_set_value dxf_blocks_read ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49613

    Affected packages

    Package

    Name: libredwg

    Purl: pkg:generic/libredwg

    Affected ranges

    Type: GIT

    Events:

    Introduced- 8984c223f14dc81180ca5da66f92e5932992bb5c
    Fixed -428d1ed6a874d11b39a34f779140755f087fc9e2

    Affected versions

    0.12.4.4635
    0.12.4.4637
    0.12.4.4641
    0.12.4.4643
    0.12.4.4647
    0.12.4.4652
    0.12.4.4654
    0.12.4.4658
    0.12.4.4660
    0.12.4.4668
    0.12.5.4669
    0.12.5.4678
    0.12.5.4685
    0.12.5.4690
    0.12.5.4693
    0.12.5.4695
    0.12.5.4697
    0.12.5.4700
    0.12.5.4709
    0.12.5.4712
    0.12.5.4715
    0.12.5.4722

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-657 | CVE-DB