OSV-2022-656 Heap-buffer-overflow in dwg_decode_LWPOLYLINE_private

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49630 Crash type: Heap-buffer-overflow READ 1 Crash state: dwgdecodeLWPOLYLINEprivate dwgdecodeLWPOLYLINE dwgdecodeaddobject...

CVE-2019-20015

An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwgdecodeLWPOLYLINEprivate in dwg.spec...

CVE-2019-20015

An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwgdecodeLWPOLYLINEprivate in dwg.spec...

CVE-2019-20015

An issue was discovered in GNU LibreDWG 0.92. Crafted input will lead to an attempted excessive memory allocation in dwgdecodeLWPOLYLINEprivate in dwg.spec...

CVE-2019-20015

CVE-2019-20015 affects GNU LibreDWG 0.92. Crafted input can trigger an excessive memory allocation in dwg_decode_LWPOLYLINE_private (dwg.spec). Public U/A details are provided across multiple advisories; exploitability status is not stated in the provided documents. OpenSUSE/SUSE advisories show ...