CVE-2026-54610

The LibreDWG library (versions prior to 0.14 ) contains a vulnerability in the bit_TV_to_utf8() function located in src/bits.c. The root cause is that the function can perform an in-place write to the caller-provided src buffer—despite accepting const input—when an iconv() error (other than E2BIG...

CVE-2026-54610 LibreDWG: const-input mutation and crash in bit_TV_to_utf8 error handling

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, bitTVtoutf8 in src/bits.c can write to the caller-provided src buffer despite accepting const input. On an iconv error other than E2BIG, the function frees its output buffer and passes the original input alias to bituexpand,...

CVE-2026-54610: libredwg: LibreDWG is a free C library to read and write DWG files

LibreDWG is a free C library to read and write DWG files. Prior to 0.14, bitTVtoutf8 in src/bits.c can write to the caller-provided src buffer despite accepting const input. On an iconv error other than E2BIG, the function frees its output buffer and passes the original input alias to bituexpand,...

OSV-2023-965 Heap-buffer-overflow in bit_TV_to_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62973 Crash type: Heap-buffer-overflow WRITE 1 Crash state: bitTVtoutf8 jsoncquote dwgjsonTEXTprivate...

libredwg:llvmfuzz: Heap-buffer-overflow in bit_TV_to_utf8

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=5900860527607808 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

OSV-2023-874 Memcpy-param-overlap in bit_u_expand

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62461 Crash type: Memcpy-param-overlap Crash state: bituexpand bitTVtoutf8 dwgdecodeheadervariables...

OSV-2023-850 Heap-buffer-overflow in bit_TV_to_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62363 Crash type: Heap-buffer-overflow WRITE 1 Crash state: bitTVtoutf8 jsoncquote dwgjsonLAYOUTprivate...

libredwg:llvmfuzz: Heap-buffer-overflow in bit_TV_to_utf8

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4869078445326336 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

OSV-2023-758 Heap-double-free in bit_TV_to_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61818 Crash type: Heap-double-free Crash state: bitTVtoutf8 jsoncquote jsonheaderwriteprivate...

libredwg:llvmfuzz: Heap-double-free in bit_TV_to_utf8

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4588218316881920 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x605000000810 Cra...

OSV-2023-455 Heap-buffer-overflow in bit_TV_to_utf8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59571 Crash type: Heap-buffer-overflow WRITE 1 Crash state: bitTVtoutf8 jsoncquote dwggeojsonfeature...

libredwg:llvmfuzz: Heap-buffer-overflow in bit_TV_to_utf8

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4733781932900352 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerasanlibredwg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address:...

libredwg:llvmfuzz: Crash in bit_TV_to_utf8

Project: https://github.com/LibreDWG/libredwg.git Detailed Report: https://oss-fuzz.com/testcase?key=4516765945430016 Project: libredwg Fuzzing Engine: libFuzzer Fuzz Target: llvmfuzz Job Type: libfuzzerubsanlibredwg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x10b747b79008 Crash...