libredwg:llvmfuzz: Heap-buffer-overflow in dwg_free_HATCH_private

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4746781454368768 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

PT-2019-16047

Name of the Vulnerable Software and Affected Versions GNU LibreDWG version 0.92 Description An issue in GNU LibreDWG allows crafted input to cause an attempted excessive memory allocation in the dwg decode HATCH private function within dwg.spec. Recommendations For GNU LibreDWG version 0.92,...