PT-2026-134201

LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make decode preR13 entities in src/decode.c enter a nonterminating loop that allocates a new object each iteration. decode preR13 in src/decode r11.c computes size from the raw file-controlled...

PT-2026-56693

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=528859714 Crash type: Heap-double-free Crash state: dxf entities read dwg read dxf llvmfuzz.c...

PT-2024-40742 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free error, specifically a WRITE 11 crash type. The crash state involves json fixed string, json RNUMBER Header,...

PT-2024-40611

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 8 crash has been reported. The crash involves the dxf tables read and dwg read dxf functions in the llvmfuzz.c file. No...

PT-2024-40738

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow crash. Technical details include a crash type of Heap-buffer-overflow WRITE 2. The crash state involves js...

PT-2023-35603

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 8 crash has been reported. The crash involves the dxf tables read and dwg read dxf functions in the llvmfuzz.c file. No...

PT-2023-35567 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read crash. The crash occurs in the dxf header read and dwg read dxf functions, as indicated by the crash...

PT-2022-21658

Name of the Vulnerable Software and Affected Versions LibreDWG version 0.12.4.4608 Description A double-free issue was discovered in the dwg read file function at dwg.c. This issue affects the processing of files, potentially leading to memory corruption. Recommendations For LibreDWG version...

PT-2021-28168

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-use-after-free READ 2 crash type has been identified. The crash state involves dxf objects read and dwg read dxf functions in llvmfuzz.c...