From 1a6edb2c4813088ec457c046e4e5432ca60a1ff0 Mon Sep 17 00:00:00 2001 From: Vulnerability Bot Date: Wed, 11 Nov 2026 19:46:34 +0100 Subject: [PATCH] vuln-osv update 2026-11-11T18:46:30Z --- data/OSS-Fuzz/OSV-2021-1070.json | 2 +- data/OSS-Fuzz/OSV-2021-1086.json | 2 +- data/OSS-Fuzz/OSV-2021-1343.json | 2 +- data/OSS-Fuzz/OSV-2021-1672.json | 2 +- data/OSS-Fuzz/OSV-2021-820.json | 2 +- data/OSS-Fuzz/OSV-2022-1134.json | 2 +- data/OSS-Fuzz/OSV-2022-1176.json | 2 +- data/OSS-Fuzz/OSV-2022-1198.json | 2 +- data/OSS-Fuzz/OSV-2022-1259.json | 2 +- data/OSS-Fuzz/OSV-2022-372.json | 2 +- data/OSS-Fuzz/OSV-2022-379.json | 2 +- data/OSS-Fuzz/OSV-2022-388.json | 2 +- data/OSS-Fuzz/OSV-2022-400.json | 2 +- data/OSS-Fuzz/OSV-2022-581.json | 2 +- data/OSS-Fuzz/OSV-2022-608.json | 2 +- data/OSS-Fuzz/OSV-2022-653.json | 2 +- data/OSS-Fuzz/OSV-2022-725.json | 2 +- data/OSS-Fuzz/OSV-2023-1350.json | 2 +- data/OSS-Fuzz/OSV-2023-307.json | 2 +- data/OSS-Fuzz/OSV-2023-319.json | 2 +- data/OSS-Fuzz/OSV-2023-390.json | 2 +- data/OSS-Fuzz/OSV-2023-606.json | 2 +- data/OSS-Fuzz/OSV-2024-914.json | 2 +- data/OSS-Fuzz/OSV-2026-1077.json | 2 +- data/OSS-Fuzz/OSV-2026-1113.json | 2 +- data/OSS-Fuzz/OSV-2026-1163.json | 1 + data/npm/MAL-2026-10438.json | 2 +- data/npm/MAL-2026-10687.json | 2 +- data/npm/MAL-2026-11205.json | 2 +- data/npm/MAL-2026-16053.json | 2 +- data/npm/MAL-2026-16054.json | 2 +- data/npm/MAL-2026-16069.json | 2 +- data/npm/MAL-2026-16390.json | 2 +- data/npm/MAL-2026-19117.json | 1 + data/npm/MAL-2026-19118.json | 2 +- data/npm/MAL-2026-19119.json | 1 + data/npm/MAL-2026-19120.json | 1 + data/npm/MAL-2026-19121.json | 1 + data/npm/MAL-2026-19122.json | 1 + data/npm/MAL-2026-19123.json | 1 + data/npm/MAL-2026-19124.json | 1 + data/npm/MAL-2026-19125.json | 1 + data/npm/MAL-2026-19126.json | 1 + data/npm/MAL-2026-19127.json | 1 + data/npm/MAL-2026-19128.json | 1 + data/npm/MAL-2026-19129.json | 1 + data/npm/MAL-2026-19130.json | 1 + data/npm/MAL-2026-19131.json | 1 + data/npm/MAL-2026-19132.json | 1 + data/npm/MAL-2026-19133.json | 1 + data/npm/MAL-2026-19134.json | 1 + data/npm/MAL-2026-19135.json | 1 + data/npm/MAL-2026-19136.json | 1 + data/npm/MAL-2026-19137.json | 1 + data/npm/MAL-2026-19138.json | 1 + data/npm/MAL-2026-19139.json | 1 + data/npm/MAL-2026-19140.json | 1 + data/npm/MAL-2026-19141.json | 1 + state/sync.json | 16 ++++++++-------- 59 files changed, 66 insertions(+), 41 deletions(-) create mode 100644 data/OSS-Fuzz/OSV-2026-1163.json create mode 100644 data/npm/MAL-2026-19117.json create mode 100644 data/npm/MAL-2026-19119.json create mode 100644 data/npm/MAL-2026-19120.json create mode 100644 data/npm/MAL-2026-19121.json create mode 100644 data/npm/MAL-2026-19122.json create mode 100644 data/npm/MAL-2026-19123.json create mode 100644 data/npm/MAL-2026-19124.json create mode 100644 data/npm/MAL-2026-19125.json create mode 100644 data/npm/MAL-2026-19126.json create mode 100644 data/npm/MAL-2026-19127.json create mode 100644 data/npm/MAL-2026-19128.json create mode 100644 data/npm/MAL-2026-19129.json create mode 100644 data/npm/MAL-2026-19130.json create mode 100644 data/npm/MAL-2026-19131.json create mode 100644 data/npm/MAL-2026-19132.json create mode 100644 data/npm/MAL-2026-19133.json create mode 100644 data/npm/MAL-2026-19134.json create mode 100644 data/npm/MAL-2026-19135.json create mode 100644 data/npm/MAL-2026-19136.json create mode 100644 data/npm/MAL-2026-19137.json create mode 100644 data/npm/MAL-2026-19138.json create mode 100644 data/npm/MAL-2026-19139.json create mode 100644 data/npm/MAL-2026-19140.json create mode 100644 data/npm/MAL-2026-19141.json diff --git a/data/OSS-Fuzz/OSV-2021-1070.json b/data/OSS-Fuzz/OSV-2021-1070.json index fc27fa6f0d..bea1cb8c33 100644 --- a/data/OSS-Fuzz/OSV-2021-1070.json +++ b/data/OSS-Fuzz/OSV-2021-1070.json @@ -1 +1 @@ -{"schema_version":"1.9.2","id":"OSV-2021-1070","published":"2021-07-29T00:01:10.187569Z","modified":"2026-11-09T14:30:04.965987346Z","summary":"Heap-buffer-overflow in ZSTD_decompressBlock_internal","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36623\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nZSTD_decompressBlock_internal\nZSTD_decompressMultiFrame\nZSTD_decompressDCtx\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"861ba79f31393dec0a0782ca11cf32cebb6f6610"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2021-1070.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36623"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2021-1070","published":"2021-07-29T00:01:10.187569Z","modified":"2026-11-11T14:30:03.340554694Z","summary":"Heap-buffer-overflow in ZSTD_decompressBlock_internal","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36623\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nZSTD_decompressBlock_internal\nZSTD_decompressMultiFrame\nZSTD_decompressDCtx\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"861ba79f31393dec0a0782ca11cf32cebb6f6610"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2021-1070.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36623"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2021-1086.json b/data/OSS-Fuzz/OSV-2021-1086.json index e75207400e..cdba31bbc0 100644 --- a/data/OSS-Fuzz/OSV-2021-1086.json +++ b/data/OSS-Fuzz/OSV-2021-1086.json @@ -1 +1 @@ -{"schema_version":"1.9.2","id":"OSV-2021-1086","published":"2021-08-02T00:00:31.888461Z","modified":"2026-11-10T14:30:05.825085140Z","summary":"Heap-buffer-overflow in dwg_convert_SAB_to_SAT1","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36728\n\n```\nCrash type: Heap-buffer-overflow READ 2\nCrash state:\ndwg_convert_SAB_to_SAT1\ndxf_3dsolid\ndwg_dxf_REGION_private\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"629cbbdcebd7f5751ddb72eacf8f3e1a5b854e2b"}]}],"versions":["0.12.3.4264","0.12.3.4267","0.12.3.4270","0.12.3.4273","0.12.3.4280","0.12.4","0.12.4.4288","0.12.4.4296","0.12.4.4298","0.12.4.4300","0.12.4.4302","0.12.4.4307","0.12.4.4313","0.12.4.4317","0.12.4.4321","0.12.4.4324","0.12.4.4331","0.12.4.4338","0.12.4.4343","0.12.4.4348","0.12.4.4362","0.12.4.4364","0.12.4.4367","0.12.4.4287","0.12.4.4368","0.12.4.4375","0.12.4.4378","0.12.4.4382","0.12.4.4384","0.12.4.4387","0.12.4.4390","0.12.4.4393","0.12.5-pre","0.12.4.4395","0.12.4.4398","0.12.4.4399","0.12.4.4400","0.12.4.4402","0.12.5","0.12.4.4403","0.12.4.4404","0.12.4.4409","0.12.4.4415","0.12.4.4420","0.12.4.4423","0.12.4.4425","0.12.4.4430","0.12.4.4437","0.12.4.4442","0.12.4.4444","0.12.4.4462","0.12.4.4466","0.12.4.4467","0.12.4.4475","0.12.4.4487","0.12.4.4491","0.12.4.4492","0.12.4.4494","0.12.4.4497","0.12.4.4507","0.12.4.4515","0.12.4.4517","0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2021-1086.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36728"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2021-1086","published":"2021-08-02T00:00:31.888461Z","modified":"2026-11-11T14:30:03.211606649Z","summary":"Heap-buffer-overflow in dwg_convert_SAB_to_SAT1","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36728\n\n```\nCrash type: Heap-buffer-overflow READ 2\nCrash state:\ndwg_convert_SAB_to_SAT1\ndxf_3dsolid\ndwg_dxf_REGION_private\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"629cbbdcebd7f5751ddb72eacf8f3e1a5b854e2b"}]}],"versions":["0.12.3.4264","0.12.3.4267","0.12.3.4270","0.12.3.4273","0.12.3.4280","0.12.4","0.12.4.4288","0.12.4.4296","0.12.4.4298","0.12.4.4300","0.12.4.4302","0.12.4.4307","0.12.4.4313","0.12.4.4317","0.12.4.4321","0.12.4.4324","0.12.4.4331","0.12.4.4338","0.12.4.4343","0.12.4.4348","0.12.4.4362","0.12.4.4364","0.12.4.4367","0.12.4.4287","0.12.4.4368","0.12.4.4375","0.12.4.4378","0.12.4.4382","0.12.4.4384","0.12.4.4387","0.12.4.4390","0.12.4.4393","0.12.5-pre","0.12.4.4395","0.12.4.4398","0.12.4.4399","0.12.4.4400","0.12.4.4402","0.12.5","0.12.4.4403","0.12.4.4404","0.12.4.4409","0.12.4.4415","0.12.4.4420","0.12.4.4423","0.12.4.4425","0.12.4.4430","0.12.4.4437","0.12.4.4442","0.12.4.4444","0.12.4.4462","0.12.4.4466","0.12.4.4467","0.12.4.4475","0.12.4.4487","0.12.4.4491","0.12.4.4492","0.12.4.4494","0.12.4.4497","0.12.4.4507","0.12.4.4515","0.12.4.4517","0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2021-1086.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36728"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2021-1343.json b/data/OSS-Fuzz/OSV-2021-1343.json index 9f711fb145..2b10529362 100644 --- a/data/OSS-Fuzz/OSV-2021-1343.json +++ b/data/OSS-Fuzz/OSV-2021-1343.json @@ -1 +1 @@ -{"schema_version":"1.9.2","id":"OSV-2021-1343","published":"2021-09-21T00:01:33.177403Z","modified":"2026-11-10T14:30:05.828037672Z","summary":"Heap-buffer-overflow in get_next_owned_entity","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38994\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\nget_next_owned_entity\ndwg_write_dxfb\nllvmfuzz.c\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"1d691254204db38d1473e050776346b7de751ce8"}]}],"versions":["0.12.4.4313","0.12.4.4317","0.12.4.4321","0.12.4.4324","0.12.4.4331","0.12.4.4338","0.12.4.4343","0.12.4.4348","0.12.4.4362","0.12.4.4364","0.12.4.4367","0.12.4.4368","0.12.4.4375","0.12.4.4378","0.12.4.4382","0.12.4.4384","0.12.4.4387","0.12.4.4390","0.12.4.4393","0.12.5-pre","0.12.4.4395","0.12.4.4398","0.12.4.4399","0.12.4.4400","0.12.4.4402","0.12.5","0.12.4.4403","0.12.4.4404","0.12.4.4409","0.12.4.4415","0.12.4.4420","0.12.4.4423","0.12.4.4425","0.12.4.4430","0.12.4.4437","0.12.4.4442","0.12.4.4444","0.12.4.4462","0.12.4.4466","0.12.4.4467","0.12.4.4475","0.12.4.4487","0.12.4.4491","0.12.4.4492","0.12.4.4494","0.12.4.4497","0.12.4.4507","0.12.4.4515","0.12.4.4517","0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2021-1343.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38994"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2021-1343","published":"2021-09-21T00:01:33.177403Z","modified":"2026-11-11T14:30:03.220463676Z","summary":"Heap-buffer-overflow in get_next_owned_entity","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38994\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\nget_next_owned_entity\ndwg_write_dxfb\nllvmfuzz.c\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"1d691254204db38d1473e050776346b7de751ce8"}]}],"versions":["0.12.4.4313","0.12.4.4317","0.12.4.4321","0.12.4.4324","0.12.4.4331","0.12.4.4338","0.12.4.4343","0.12.4.4348","0.12.4.4362","0.12.4.4364","0.12.4.4367","0.12.4.4368","0.12.4.4375","0.12.4.4378","0.12.4.4382","0.12.4.4384","0.12.4.4387","0.12.4.4390","0.12.4.4393","0.12.5-pre","0.12.4.4395","0.12.4.4398","0.12.4.4399","0.12.4.4400","0.12.4.4402","0.12.5","0.12.4.4403","0.12.4.4404","0.12.4.4409","0.12.4.4415","0.12.4.4420","0.12.4.4423","0.12.4.4425","0.12.4.4430","0.12.4.4437","0.12.4.4442","0.12.4.4444","0.12.4.4462","0.12.4.4466","0.12.4.4467","0.12.4.4475","0.12.4.4487","0.12.4.4491","0.12.4.4492","0.12.4.4494","0.12.4.4497","0.12.4.4507","0.12.4.4515","0.12.4.4517","0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2021-1343.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=38994"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2021-1672.json b/data/OSS-Fuzz/OSV-2021-1672.json index e45eca9440..0a11527499 100644 --- a/data/OSS-Fuzz/OSV-2021-1672.json +++ b/data/OSS-Fuzz/OSV-2021-1672.json @@ -1 +1 @@ -{"schema_version":"1.9.2","id":"OSV-2021-1672","published":"2021-12-12T00:01:29.747137Z","modified":"2026-11-09T14:30:04.967390122Z","summary":"Heap-buffer-overflow in blosc_d","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42210\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nblosc_d\ndo_job\nblosc_run_decompression_with_context\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"4a727370b1c2e9746434c00bf2236db86c31ea5c"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2021-1672.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42210"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2021-1672","published":"2021-12-12T00:01:29.747137Z","modified":"2026-11-11T14:30:03.341943960Z","summary":"Heap-buffer-overflow in blosc_d","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42210\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nblosc_d\ndo_job\nblosc_run_decompression_with_context\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"4a727370b1c2e9746434c00bf2236db86c31ea5c"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2021-1672.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42210"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2021-820.json b/data/OSS-Fuzz/OSV-2021-820.json index 7a3d1185a2..970f384e40 100644 --- a/data/OSS-Fuzz/OSV-2021-820.json +++ b/data/OSS-Fuzz/OSV-2021-820.json @@ -1 +1 @@ -{"schema_version":"1.9.2","id":"OSV-2021-820","published":"2021-06-02T00:00:31.619765Z","modified":"2026-10-28T15:45:09.151266043Z","summary":"UNKNOWN READ in virtio_gpu_disable_scanout","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34831\n\n```\nCrash type: UNKNOWN READ\nCrash state:\nvirtio_gpu_disable_scanout\nvirtio_gpu_set_scanout\nvirtio_gpu_simple_process_cmd\n```\n","affected":[{"package":{"name":"qemu","ecosystem":"OSS-Fuzz","purl":"pkg:generic/qemu"},"ranges":[{"type":"GIT","repo":"https://git.qemu.org/git/qemu.git","events":[{"introduced":"e64d4b6a9bc3ba216a988276bcdc27d06fd48e59"}]}],"versions":["v6.1.0-rc0","v6.1.0-rc1","v6.1.0-rc2","v6.1.0-rc3","v6.1.0-rc4","v6.1.0","v6.1.1","v6.2.0","v6.2.0-rc0","v6.2.0-rc1","v6.2.0-rc3","v6.2.0-rc4","v7.0.0","v7.0.0-rc0","v7.0.0-rc1","v7.0.0-rc2","v7.0.0-rc3","v7.0.0-rc4","v7.1.0-rc0","v7.1.0-rc1","v7.1.0-rc2","v7.1.0-rc3","v7.1.0-rc4","v7.1.0","v7.2.0-rc0","v7.2.0-rc1","v7.2.0-rc2","v7.2.0-rc3","v7.2.0-rc4","v7.2.0","v8.0.0-rc0","v8.0.0-rc1","v8.0.0-rc2","v7.2.1","v8.0.0-rc3","v8.0.0-rc4","v8.0.0","v7.2.2","v7.2.3","v8.0.1","v8.0.2","v7.2.4","v8.0.3","v8.1.0-rc0","v8.1.0-rc1","v8.1.0-rc2","v7.2.5","v8.0.4","v8.1.0-rc3","v8.1.0-rc4","v8.1.0","v7.2.6","v8.0.5","v8.1.1","v8.1.2","v8.2.0-rc0","v7.2.7","v8.1.3","v8.2.0-rc1","v8.2.0-rc2","v8.2.0-rc3","v8.2.0-rc4","v8.2.0","v7.2.8","v8.1.4","v7.2.9","v8.1.5","v8.2.1","v7.2.10","v8.2.2","v9.0.0-rc0","v9.0.0-rc1","v9.0.0-rc2","v9.0.0-rc3","v9.0.0-rc4","v7.2.11","v8.2.3","v9.0.0","v8.2.4","v7.2.12","v8.2.5","v9.0.1","v7.2.13","v8.2.6","v9.0.2","v9.1.0-rc0","v9.1.0-rc1","v9.1.0-rc2","v9.1.0-rc3","v9.1.0-rc4","v9.1.0","v7.2.14","v8.2.7","v9.0.3","v9.1.1","v9.2.0-rc0","v7.2.15","v8.2.8","v9.0.4","v9.1.2","v9.2.0-rc1","v9.2.0-rc2","v9.2.0-rc3","v9.2.0","v7.2.16","v8.2.9","v9.1.3","v9.2.1","v9.2.2","v10.0.0-rc0","v10.0.0-rc1","v7.2.17","v8.2.10","v9.2.3","v10.0.0-rc2","v10.0.0-rc3","v10.0.0-rc4","v10.0.0","v10.0.1","v7.2.18","v9.2.4","v10.0.2","v10.0.3","v10.1.0-rc0","v7.2.19","v10.0.4","v10.1.0","v10.1.0-rc1","v10.1.0-rc2","v10.1.0-rc3","v10.1.0-rc4","v7.2.20","v10.0.5","v10.1.1","v7.2.21","v10.0.6","v10.1.2","v10.2.0-rc1","v10.2.0-rc2","v10.0.7","v10.1.3","v7.2.22","v10.2.0-rc3","v10.2.0-rc4","v10.2.0","v10.0.8","v10.1.4","v10.2.1","v10.0.9","v10.1.5","v10.2.2","v11.0.0-rc0","v11.0.0-rc1","v11.0.0-rc2","v11.0.0-rc3","v11.0.0-rc4","v11.0.0","v10.0.10","v10.2.3","v11.0.1","v10.0.11","v10.2.4","v11.0.2","v10.0.12","v11.0.3","v11.1.0-rc0","v11.1.0-rc1","v11.1.0-rc2","v11.1.0-rc3","v11.1.0","v10.0.13","v11.0.4","v11.1.1","v10.0.14","v11.0.5","v11.1.2","v10.0.15","v11.1.3","v6.2.0-rc2"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qemu/OSV-2021-820.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34831"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2021-820","published":"2021-06-02T00:00:31.619765Z","modified":"2026-11-11T15:00:08.495631556Z","summary":"UNKNOWN READ in virtio_gpu_disable_scanout","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34831\n\n```\nCrash type: UNKNOWN READ\nCrash state:\nvirtio_gpu_disable_scanout\nvirtio_gpu_set_scanout\nvirtio_gpu_simple_process_cmd\n```\n","affected":[{"package":{"name":"qemu","ecosystem":"OSS-Fuzz","purl":"pkg:generic/qemu"},"ranges":[{"type":"GIT","repo":"https://git.qemu.org/git/qemu.git","events":[{"introduced":"e64d4b6a9bc3ba216a988276bcdc27d06fd48e59"}]}],"versions":["v6.1.0-rc0","v6.1.0-rc1","v6.1.0-rc2","v6.1.0-rc3","v6.1.0-rc4","v6.1.0","v6.1.1","v6.2.0","v6.2.0-rc0","v6.2.0-rc1","v6.2.0-rc3","v6.2.0-rc4","v7.0.0","v7.0.0-rc0","v7.0.0-rc1","v7.0.0-rc2","v7.0.0-rc3","v7.0.0-rc4","v7.1.0-rc0","v7.1.0-rc1","v7.1.0-rc2","v7.1.0-rc3","v7.1.0-rc4","v7.1.0","v7.2.0-rc0","v7.2.0-rc1","v7.2.0-rc2","v7.2.0-rc3","v7.2.0-rc4","v7.2.0","v8.0.0-rc0","v8.0.0-rc1","v8.0.0-rc2","v7.2.1","v8.0.0-rc3","v8.0.0-rc4","v8.0.0","v7.2.2","v7.2.3","v8.0.1","v8.0.2","v7.2.4","v8.0.3","v8.1.0-rc0","v8.1.0-rc1","v8.1.0-rc2","v7.2.5","v8.0.4","v8.1.0-rc3","v8.1.0-rc4","v8.1.0","v7.2.6","v8.0.5","v8.1.1","v8.1.2","v8.2.0-rc0","v7.2.7","v8.1.3","v8.2.0-rc1","v8.2.0-rc2","v8.2.0-rc3","v8.2.0-rc4","v8.2.0","v7.2.8","v8.1.4","v7.2.9","v8.1.5","v8.2.1","v7.2.10","v8.2.2","v9.0.0-rc0","v9.0.0-rc1","v9.0.0-rc2","v9.0.0-rc3","v9.0.0-rc4","v7.2.11","v8.2.3","v9.0.0","v8.2.4","v7.2.12","v8.2.5","v9.0.1","v7.2.13","v8.2.6","v9.0.2","v9.1.0-rc0","v9.1.0-rc1","v9.1.0-rc2","v9.1.0-rc3","v9.1.0-rc4","v9.1.0","v7.2.14","v8.2.7","v9.0.3","v9.1.1","v9.2.0-rc0","v7.2.15","v8.2.8","v9.0.4","v9.1.2","v9.2.0-rc1","v9.2.0-rc2","v9.2.0-rc3","v9.2.0","v7.2.16","v8.2.9","v9.1.3","v9.2.1","v9.2.2","v10.0.0-rc0","v10.0.0-rc1","v7.2.17","v8.2.10","v9.2.3","v10.0.0-rc2","v10.0.0-rc3","v10.0.0-rc4","v10.0.0","v10.0.1","v7.2.18","v9.2.4","v10.0.2","v10.0.3","v10.1.0-rc0","v7.2.19","v10.0.4","v10.1.0","v10.1.0-rc1","v10.1.0-rc2","v10.1.0-rc3","v10.1.0-rc4","v7.2.20","v10.0.5","v10.1.1","v7.2.21","v10.0.6","v10.1.2","v10.2.0-rc1","v10.2.0-rc2","v10.0.7","v10.1.3","v7.2.22","v10.2.0-rc3","v10.2.0-rc4","v10.2.0","v10.0.8","v10.1.4","v10.2.1","v10.0.9","v10.1.5","v10.2.2","v11.0.0-rc0","v11.0.0-rc1","v11.0.0-rc2","v11.0.0-rc3","v11.0.0-rc4","v11.0.0","v10.0.10","v10.2.3","v11.0.1","v10.0.11","v10.2.4","v11.0.2","v10.0.12","v11.0.3","v11.1.0-rc0","v11.1.0-rc1","v11.1.0-rc2","v11.1.0-rc3","v11.1.0","v10.0.13","v11.0.4","v11.1.1","v10.0.14","v11.0.5","v11.1.2","v10.0.15","v11.1.3","v11.2.0-rc0","v6.2.0-rc2"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qemu/OSV-2021-820.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34831"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2022-1134.json b/data/OSS-Fuzz/OSV-2022-1134.json index bf81807422..d743608a28 100644 --- a/data/OSS-Fuzz/OSV-2022-1134.json +++ b/data/OSS-Fuzz/OSV-2022-1134.json @@ -1 +1 @@ -{"schema_version":"1.9.2","id":"OSV-2022-1134","published":"2022-11-04T00:02:11.463429Z","modified":"2026-11-09T14:30:04.965661082Z","summary":"Heap-buffer-overflow in ndlz8_decompress","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52967\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nndlz8_decompress\nblosc_d\ndo_job\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"1c9795f2e3e04a79f13d9e7658e6d6e47dfe1cc4"}]}],"versions":["v2.0.0","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2022-1134.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52967"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2022-1134","published":"2022-11-04T00:02:11.463429Z","modified":"2026-11-11T14:30:03.340465029Z","summary":"Heap-buffer-overflow in ndlz8_decompress","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52967\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nndlz8_decompress\nblosc_d\ndo_job\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"1c9795f2e3e04a79f13d9e7658e6d6e47dfe1cc4"}]}],"versions":["v2.0.0","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2022-1134.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52967"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2022-1176.json b/data/OSS-Fuzz/OSV-2022-1176.json index 3a2bf3e6d0..5128fec4b1 100644 --- a/data/OSS-Fuzz/OSV-2022-1176.json +++ b/data/OSS-Fuzz/OSV-2022-1176.json @@ -1 +1 @@ -{"schema_version":"1.9.2","id":"OSV-2022-1176","published":"2022-11-18T13:00:26.857477Z","modified":"2026-11-09T14:30:04.568113729Z","summary":"Heap-double-free in dwg_free","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53483\n\n```\nCrash type: Heap-double-free\nCrash state:\ndwg_free\nllvmfuzz.c\ndwg_free\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"2d4a473b670848fe9aac2fde249964d1ed9ba97e"}]}],"versions":["0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-1176.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53483"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2022-1176","published":"2022-11-18T13:00:26.857477Z","modified":"2026-11-11T14:30:03.225734879Z","summary":"Heap-double-free in dwg_free","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53483\n\n```\nCrash type: Heap-double-free\nCrash state:\ndwg_free\nllvmfuzz.c\ndwg_free\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"2d4a473b670848fe9aac2fde249964d1ed9ba97e"}]}],"versions":["0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-1176.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53483"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2022-1198.json b/data/OSS-Fuzz/OSV-2022-1198.json index 92cc0d40b9..fb084a777a 100644 --- a/data/OSS-Fuzz/OSV-2022-1198.json +++ b/data/OSS-Fuzz/OSV-2022-1198.json @@ -1 +1 @@ -{"schema_version":"1.9.2","id":"OSV-2022-1198","published":"2022-11-23T13:02:06.623044Z","modified":"2026-11-10T14:45:03.486836355Z","summary":"Heap-buffer-overflow in dwg_json_LTYPE","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53617\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\ndwg_json_LTYPE\njson_objects_write\ndwg_write_json\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"580e8bbebf18579b97e2c20b032368b9079624ca"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-1198.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53617"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2022-1198","published":"2022-11-23T13:02:06.623044Z","modified":"2026-11-11T14:45:02.962738412Z","summary":"Heap-buffer-overflow in dwg_json_LTYPE","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53617\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\ndwg_json_LTYPE\njson_objects_write\ndwg_write_json\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"580e8bbebf18579b97e2c20b032368b9079624ca"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-1198.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53617"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2022-1259.json b/data/OSS-Fuzz/OSV-2022-1259.json index 0af93a3ea8..9871a1b57d 100644 --- a/data/OSS-Fuzz/OSV-2022-1259.json +++ b/data/OSS-Fuzz/OSV-2022-1259.json @@ -1 +1 @@ -{"schema_version":"1.9.2","id":"OSV-2022-1259","published":"2022-12-13T13:00:46.870838Z","modified":"2026-11-10T14:30:05.809398078Z","summary":"Heap-buffer-overflow in dwg_decode_INSERT_private","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54228\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ndwg_decode_INSERT_private\ndwg_decode_INSERT\ndwg_decode_add_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7a44f5e43b2a49bf244e24b796a657c9c78f31a1"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-1259.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54228"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2022-1259","published":"2022-12-13T13:00:46.870838Z","modified":"2026-11-11T14:45:03.811584307Z","summary":"Heap-buffer-overflow in dwg_decode_INSERT_private","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54228\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ndwg_decode_INSERT_private\ndwg_decode_INSERT\ndwg_decode_add_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7a44f5e43b2a49bf244e24b796a657c9c78f31a1"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-1259.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54228"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2022-372.json b/data/OSS-Fuzz/OSV-2022-372.json index b2de1915b0..d70ecb016b 100644 --- a/data/OSS-Fuzz/OSV-2022-372.json +++ b/data/OSS-Fuzz/OSV-2022-372.json @@ -1 +1 @@ -{"schema_version":"1.9.2","id":"OSV-2022-372","published":"2022-04-26T00:00:09.352798Z","modified":"2026-11-10T14:30:05.802361585Z","summary":"Heap-buffer-overflow in dwg_encode_VERTEX_2D","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46994\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\ndwg_encode_VERTEX_2D\ndwg_encode_add_object\ndwg_encode\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7bda865d59f843e174ac7e14c7dfe25243900956"}]}],"versions":["0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-372.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46994"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2022-372","published":"2022-04-26T00:00:09.352798Z","modified":"2026-11-11T14:45:04.039550097Z","summary":"Heap-buffer-overflow in dwg_encode_VERTEX_2D","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46994\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\ndwg_encode_VERTEX_2D\ndwg_encode_add_object\ndwg_encode\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7bda865d59f843e174ac7e14c7dfe25243900956"}]}],"versions":["0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-372.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46994"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2022-379.json b/data/OSS-Fuzz/OSV-2022-379.json index bfc59ac0a9..55dcf318da 100644 --- a/data/OSS-Fuzz/OSV-2022-379.json +++ b/data/OSS-Fuzz/OSV-2022-379.json @@ -1 +1 @@ -{"schema_version":"1.9.2","id":"OSV-2022-379","published":"2022-04-27T00:00:44.539231Z","modified":"2026-11-09T14:30:05.461927120Z","summary":"Segv on unknown address in bit_write_TV","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47014\n\n```\nCrash type: Segv on unknown address\nCrash state:\nbit_write_TV\nbit_write_T\ndwg_encode_BLOCK\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7bda865d59f843e174ac7e14c7dfe25243900956"}]}],"versions":["0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922"],"ecosystem_specific":{"severity":null},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-379.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47014"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2022-379","published":"2022-04-27T00:00:44.539231Z","modified":"2026-11-11T14:30:03.222354709Z","summary":"Segv on unknown address in bit_write_TV","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47014\n\n```\nCrash type: Segv on unknown address\nCrash state:\nbit_write_TV\nbit_write_T\ndwg_encode_BLOCK\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7bda865d59f843e174ac7e14c7dfe25243900956"}]}],"versions":["0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936"],"ecosystem_specific":{"severity":null},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-379.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47014"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2022-388.json b/data/OSS-Fuzz/OSV-2022-388.json index 2c54d8d324..c60a51c4d2 100644 --- a/data/OSS-Fuzz/OSV-2022-388.json +++ b/data/OSS-Fuzz/OSV-2022-388.json @@ -1 +1 @@ -{"schema_version":"1.9.2","id":"OSV-2022-388","published":"2022-05-01T00:01:54.904711Z","modified":"2026-11-10T14:30:06.606665640Z","summary":"Segv on unknown address in dwg_ref_get_object","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47151\n\n```\nCrash type: Segv on unknown address\nCrash state:\ndwg_ref_get_object\ndwg_geojson_feature\ndwg_geojson_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7bda865d59f843e174ac7e14c7dfe25243900956"}]}],"versions":["0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927"],"ecosystem_specific":{"severity":null},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-388.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47151"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2022-388","published":"2022-05-01T00:01:54.904711Z","modified":"2026-11-11T14:45:02.965884894Z","summary":"Segv on unknown address in dwg_ref_get_object","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47151\n\n```\nCrash type: Segv on unknown address\nCrash state:\ndwg_ref_get_object\ndwg_geojson_feature\ndwg_geojson_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"7bda865d59f843e174ac7e14c7dfe25243900956"}]}],"versions":["0.12.4.4522","0.12.4.4527","0.12.4.4530","0.12.4.4533","0.12.4.4535","0.12.4.4542","0.12.4.4544","0.12.4.4545","0.12.4.4548","0.12.4.4550","0.12.4.4553","0.12.4.4566","0.12.4.4567","0.12.4.4572","0.12.4.4583","0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936"],"ecosystem_specific":{"severity":null},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-388.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47151"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2022-400.json b/data/OSS-Fuzz/OSV-2022-400.json index 69ca3dd8a1..4e328d6a6e 100644 --- a/data/OSS-Fuzz/OSV-2022-400.json +++ b/data/OSS-Fuzz/OSV-2022-400.json @@ -1 +1 @@ -{"schema_version":"1.9.2","id":"OSV-2022-400","published":"2022-05-08T00:00:40.782520Z","modified":"2026-11-10T14:30:05.810886998Z","summary":"Heap-double-free in dwg_free_XRECORD_private","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47300\n\n```\nCrash type: Heap-double-free\nCrash state:\ndwg_free_XRECORD_private\ndwg_free_XRECORD\ndwg_free_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"4eadb3538aee39bf0732ee5b273f414ddafa765e"}]}],"versions":["0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8544"],"ecosystem_specific":{"severity":null},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-400.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47300"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2022-400","published":"2022-05-08T00:00:40.782520Z","modified":"2026-11-11T14:45:02.979866453Z","summary":"Heap-double-free in dwg_free_XRECORD_private","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47300\n\n```\nCrash type: Heap-double-free\nCrash state:\ndwg_free_XRECORD_private\ndwg_free_XRECORD\ndwg_free_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"4eadb3538aee39bf0732ee5b273f414ddafa765e"}]}],"versions":["0.12.4.4590","0.12.4.4598","0.12.4.4601","0.12.4.4606","0.12.4.4607","0.12.4.4608","0.12.4.4613","0.12.4.4615","0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936","0.14.8544"],"ecosystem_specific":{"severity":null},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-400.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47300"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2022-581.json b/data/OSS-Fuzz/OSV-2022-581.json index c8e3ab6d3a..c460e31793 100644 --- a/data/OSS-Fuzz/OSV-2022-581.json +++ b/data/OSS-Fuzz/OSV-2022-581.json @@ -1 +1 @@ -{"schema_version":"1.9.2","id":"OSV-2022-581","published":"2022-07-14T00:00:45.644503Z","modified":"2026-10-28T16:45:04.382621645Z","summary":"Heap-buffer-overflow in megasas_map_sgl","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49086\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nmegasas_map_sgl\nmegasas_mmio_write\nmegasas_port_write\n```\n","affected":[{"package":{"name":"qemu","ecosystem":"OSS-Fuzz","purl":"pkg:generic/qemu"},"ranges":[{"type":"GIT","repo":"https://git.qemu.org/git/qemu.git","events":[{"introduced":"0e042025b9fe262316f29e4b8ec47f0b85c24e5f"}]}],"versions":["v6.2.0","v6.2.0-rc0","v6.2.0-rc1","v6.2.0-rc3","v6.2.0-rc4","v7.0.0","v7.0.0-rc0","v7.0.0-rc1","v7.0.0-rc2","v7.0.0-rc3","v7.0.0-rc4","v7.1.0","v7.1.0-rc0","v7.1.0-rc1","v7.1.0-rc2","v7.1.0-rc3","v7.1.0-rc4","v7.2.0-rc0","v7.2.0-rc1","v7.2.0-rc2","v7.2.0-rc3","v7.2.0-rc4","v7.2.0","v8.0.0-rc0","v8.0.0-rc1","v8.0.0-rc2","v7.2.1","v8.0.0-rc3","v8.0.0-rc4","v8.0.0","v7.2.2","v7.2.3","v8.0.1","v8.0.2","v7.2.4","v8.0.3","v8.1.0-rc0","v8.1.0-rc1","v8.1.0-rc2","v7.2.5","v8.0.4","v8.1.0-rc3","v8.1.0-rc4","v8.1.0","v7.2.6","v8.0.5","v8.1.1","v8.1.2","v8.2.0-rc0","v7.2.7","v8.1.3","v8.2.0-rc1","v8.2.0-rc2","v8.2.0-rc3","v8.2.0-rc4","v8.2.0","v7.2.8","v8.1.4","v7.2.9","v8.1.5","v8.2.1","v7.2.10","v8.2.2","v9.0.0-rc0","v9.0.0-rc1","v9.0.0-rc2","v9.0.0-rc3","v9.0.0-rc4","v7.2.11","v8.2.3","v9.0.0","v8.2.4","v7.2.12","v8.2.5","v9.0.1","v7.2.13","v8.2.6","v9.0.2","v9.1.0-rc0","v9.1.0-rc1","v9.1.0-rc2","v9.1.0-rc3","v9.1.0-rc4","v9.1.0","v7.2.14","v8.2.7","v9.0.3","v9.1.1","v9.2.0-rc0","v7.2.15","v8.2.8","v9.0.4","v9.1.2","v9.2.0-rc1","v9.2.0-rc2","v9.2.0-rc3","v9.2.0","v7.2.16","v8.2.9","v9.1.3","v9.2.1","v9.2.2","v10.0.0-rc0","v10.0.0-rc1","v7.2.17","v8.2.10","v9.2.3","v10.0.0-rc2","v10.0.0-rc3","v10.0.0-rc4","v10.0.0","v10.0.1","v7.2.18","v9.2.4","v10.0.2","v10.0.3","v10.1.0-rc0","v7.2.19","v10.0.4","v10.1.0","v10.1.0-rc1","v10.1.0-rc2","v10.1.0-rc3","v10.1.0-rc4","v7.2.20","v10.0.5","v10.1.1","v7.2.21","v10.0.6","v10.1.2","v10.2.0-rc1","v10.2.0-rc2","v10.0.7","v10.1.3","v7.2.22","v10.2.0-rc3","v10.2.0-rc4","v10.2.0","v10.0.8","v10.1.4","v10.2.1","v10.0.9","v10.1.5","v10.2.2","v11.0.0-rc0","v11.0.0-rc1","v11.0.0-rc2","v11.0.0-rc3","v11.0.0-rc4","v11.0.0","v10.0.10","v10.2.3","v11.0.1","v10.0.11","v10.2.4","v11.0.2","v10.0.12","v11.0.3","v11.1.0-rc0","v11.1.0-rc1","v11.1.0-rc2","v11.1.0-rc3","v11.1.0","v10.0.13","v11.0.4","v11.1.1","v10.0.14","v11.0.5","v11.1.2","v10.0.15","v11.1.3","v6.2.0-rc2"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qemu/OSV-2022-581.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49086"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2022-581","published":"2022-07-14T00:00:45.644503Z","modified":"2026-11-11T15:00:08.496704178Z","summary":"Heap-buffer-overflow in megasas_map_sgl","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49086\n\n```\nCrash type: Heap-buffer-overflow READ 4\nCrash state:\nmegasas_map_sgl\nmegasas_mmio_write\nmegasas_port_write\n```\n","affected":[{"package":{"name":"qemu","ecosystem":"OSS-Fuzz","purl":"pkg:generic/qemu"},"ranges":[{"type":"GIT","repo":"https://git.qemu.org/git/qemu.git","events":[{"introduced":"0e042025b9fe262316f29e4b8ec47f0b85c24e5f"}]}],"versions":["v6.2.0","v6.2.0-rc0","v6.2.0-rc1","v6.2.0-rc3","v6.2.0-rc4","v7.0.0","v7.0.0-rc0","v7.0.0-rc1","v7.0.0-rc2","v7.0.0-rc3","v7.0.0-rc4","v7.1.0","v7.1.0-rc0","v7.1.0-rc1","v7.1.0-rc2","v7.1.0-rc3","v7.1.0-rc4","v7.2.0-rc0","v7.2.0-rc1","v7.2.0-rc2","v7.2.0-rc3","v7.2.0-rc4","v7.2.0","v8.0.0-rc0","v8.0.0-rc1","v8.0.0-rc2","v7.2.1","v8.0.0-rc3","v8.0.0-rc4","v8.0.0","v7.2.2","v7.2.3","v8.0.1","v8.0.2","v7.2.4","v8.0.3","v8.1.0-rc0","v8.1.0-rc1","v8.1.0-rc2","v7.2.5","v8.0.4","v8.1.0-rc3","v8.1.0-rc4","v8.1.0","v7.2.6","v8.0.5","v8.1.1","v8.1.2","v8.2.0-rc0","v7.2.7","v8.1.3","v8.2.0-rc1","v8.2.0-rc2","v8.2.0-rc3","v8.2.0-rc4","v8.2.0","v7.2.8","v8.1.4","v7.2.9","v8.1.5","v8.2.1","v7.2.10","v8.2.2","v9.0.0-rc0","v9.0.0-rc1","v9.0.0-rc2","v9.0.0-rc3","v9.0.0-rc4","v7.2.11","v8.2.3","v9.0.0","v8.2.4","v7.2.12","v8.2.5","v9.0.1","v7.2.13","v8.2.6","v9.0.2","v9.1.0-rc0","v9.1.0-rc1","v9.1.0-rc2","v9.1.0-rc3","v9.1.0-rc4","v9.1.0","v7.2.14","v8.2.7","v9.0.3","v9.1.1","v9.2.0-rc0","v7.2.15","v8.2.8","v9.0.4","v9.1.2","v9.2.0-rc1","v9.2.0-rc2","v9.2.0-rc3","v9.2.0","v7.2.16","v8.2.9","v9.1.3","v9.2.1","v9.2.2","v10.0.0-rc0","v10.0.0-rc1","v7.2.17","v8.2.10","v9.2.3","v10.0.0-rc2","v10.0.0-rc3","v10.0.0-rc4","v10.0.0","v10.0.1","v7.2.18","v9.2.4","v10.0.2","v10.0.3","v10.1.0-rc0","v7.2.19","v10.0.4","v10.1.0","v10.1.0-rc1","v10.1.0-rc2","v10.1.0-rc3","v10.1.0-rc4","v7.2.20","v10.0.5","v10.1.1","v7.2.21","v10.0.6","v10.1.2","v10.2.0-rc1","v10.2.0-rc2","v10.0.7","v10.1.3","v7.2.22","v10.2.0-rc3","v10.2.0-rc4","v10.2.0","v10.0.8","v10.1.4","v10.2.1","v10.0.9","v10.1.5","v10.2.2","v11.0.0-rc0","v11.0.0-rc1","v11.0.0-rc2","v11.0.0-rc3","v11.0.0-rc4","v11.0.0","v10.0.10","v10.2.3","v11.0.1","v10.0.11","v10.2.4","v11.0.2","v10.0.12","v11.0.3","v11.1.0-rc0","v11.1.0-rc1","v11.1.0-rc2","v11.1.0-rc3","v11.1.0","v10.0.13","v11.0.4","v11.1.1","v10.0.14","v11.0.5","v11.1.2","v10.0.15","v11.1.3","v11.2.0-rc0","v6.2.0-rc2"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qemu/OSV-2022-581.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49086"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2022-608.json b/data/OSS-Fuzz/OSV-2022-608.json index 844498f275..6fa1a41633 100644 --- a/data/OSS-Fuzz/OSV-2022-608.json +++ b/data/OSS-Fuzz/OSV-2022-608.json @@ -1 +1 @@ -{"schema_version":"1.9.1","id":"OSV-2022-608","published":"2022-07-21T00:01:50.967627Z","modified":"2026-10-19T14:36:05.338864Z","summary":"Heap-use-after-free in jxl::WriteToPixelCallbackStage::ProcessRow","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49277\n\n```\nCrash type: Heap-use-after-free READ 4\nCrash state:\njxl::WriteToPixelCallbackStage::ProcessRow\njxl::LowMemoryRenderPipeline::RenderRect\njxl::LowMemoryRenderPipeline::ProcessBuffers\n```\n","affected":[{"package":{"name":"libjxl","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libjxl"},"ranges":[{"type":"GIT","repo":"https://github.com/libjxl/libjxl.git","events":[{"introduced":"eafb38fb4f3d2e00f9402a0c09ac592ebfd6a795"}]}],"versions":["v0.7-base","v0.7rc","v0.7.0","v1.0-snapshot","v0.8-snapshot","v0.8.0rc1","v0.8.0","v0.8.1","v0.9-snapshot","v0.8.2","v0.9.0","v0.9.1","v0.9.2","v0.10.0","v0.10-snapshot","v0.10.1","v0.10.2","v0.10.3","v0.8.3","v0.9.3","v0.7.1","v0.11-snapshot","v0.11.0","v0.10.4","v0.11.1","v0.8.4","v0.9.4","v0.7.2","v0.7.3","v0.10.5","v0.11.2","v0.8.5","v0.9.5","v0.12-snapshot","v0.12.0"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2022-608.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49277"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2022-608","published":"2022-07-21T00:01:50.967627Z","modified":"2026-11-11T14:30:03.783789743Z","summary":"Heap-use-after-free in jxl::WriteToPixelCallbackStage::ProcessRow","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49277\n\n```\nCrash type: Heap-use-after-free READ 4\nCrash state:\njxl::WriteToPixelCallbackStage::ProcessRow\njxl::LowMemoryRenderPipeline::RenderRect\njxl::LowMemoryRenderPipeline::ProcessBuffers\n```\n","affected":[{"package":{"name":"libjxl","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libjxl"},"ranges":[{"type":"GIT","repo":"https://github.com/libjxl/libjxl.git","events":[{"introduced":"eafb38fb4f3d2e00f9402a0c09ac592ebfd6a795"}]}],"versions":["v0.7-base","v0.7rc","v0.7.0","v1.0-snapshot","v0.8-snapshot","v0.8.0rc1","v0.8.0","v0.8.1","v0.9-snapshot","v0.8.2","v0.9.0","v0.9.1","v0.9.2","v0.10.0","v0.10-snapshot","v0.10.1","v0.10.2","v0.10.3","v0.8.3","v0.9.3","v0.7.1","v0.11-snapshot","v0.11.0","v0.10.4","v0.11.1","v0.8.4","v0.9.4","v0.7.2","v0.7.3","v0.10.5","v0.11.2","v0.8.5","v0.9.5","v0.12-snapshot","v0.12.0","v0.13.0"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2022-608.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49277"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2022-653.json b/data/OSS-Fuzz/OSV-2022-653.json index a7b3c2b7bc..d4c4ea8f5b 100644 --- a/data/OSS-Fuzz/OSV-2022-653.json +++ b/data/OSS-Fuzz/OSV-2022-653.json @@ -1 +1 @@ -{"schema_version":"1.9.2","id":"OSV-2022-653","published":"2022-07-30T00:01:52.491112Z","modified":"2026-11-10T14:30:05.831566668Z","summary":"Heap-double-free in dwg_free_common_entity_data","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49602\n\n```\nCrash type: Heap-double-free\nCrash state:\ndwg_free_common_entity_data\ndwg_free_DIMENSION_ANG2LN\ndwg_free_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"8984c223f14dc81180ca5da66f92e5932992bb5c"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-653.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49602"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2022-653","published":"2022-07-30T00:01:52.491112Z","modified":"2026-11-11T14:30:03.211482113Z","summary":"Heap-double-free in dwg_free_common_entity_data","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49602\n\n```\nCrash type: Heap-double-free\nCrash state:\ndwg_free_common_entity_data\ndwg_free_DIMENSION_ANG2LN\ndwg_free_object\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"8984c223f14dc81180ca5da66f92e5932992bb5c"}]}],"versions":["0.12.4.4635","0.12.4.4637","0.12.4.4641","0.12.4.4643","0.12.4.4647","0.12.4.4652","0.12.4.4654","0.12.4.4658","0.12.4.4660","0.12.4.4668","0.12.5.4669","0.12.5.4678","0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5465","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2022-653.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49602"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2022-725.json b/data/OSS-Fuzz/OSV-2022-725.json index 546733df66..8c06dd604c 100644 --- a/data/OSS-Fuzz/OSV-2022-725.json +++ b/data/OSS-Fuzz/OSV-2022-725.json @@ -1 +1 @@ -{"schema_version":"1.9.1","id":"OSV-2022-725","published":"2022-08-18T00:01:05.918943Z","modified":"2026-10-19T14:39:23.329486Z","summary":"Heap-buffer-overflow in jxl::N_EMU128::WriteToU8Stage::ProcessRow","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50295\n\n```\nCrash type: Heap-buffer-overflow WRITE 1\nCrash state:\njxl::N_EMU128::WriteToU8Stage::ProcessRow\njxl::LowMemoryRenderPipeline::RenderRect\njxl::LowMemoryRenderPipeline::ProcessBuffers\n```\n","affected":[{"package":{"name":"libjxl","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libjxl"},"ranges":[{"type":"GIT","repo":"https://github.com/libjxl/libjxl.git","events":[{"introduced":"a50e71631cabfbdd57d540ba080ecec19b4664af"}]}],"versions":["v0.8.0rc1","v0.8.0","v0.8.1","v0.9-snapshot","v0.8.2","v0.9.0","v0.9.1","v0.9.2","v0.10.0","v0.10-snapshot","v0.10.1","v0.10.2","v0.10.3","v0.8.3","v0.9.3","v0.11-snapshot","v0.11.0","v0.10.4","v0.11.1","v0.8.4","v0.9.4","v0.10.5","v0.11.2","v0.8.5","v0.9.5","v0.12-snapshot","v0.12.0"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2022-725.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50295"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2022-725","published":"2022-08-18T00:01:05.918943Z","modified":"2026-11-11T14:30:03.783986990Z","summary":"Heap-buffer-overflow in jxl::N_EMU128::WriteToU8Stage::ProcessRow","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50295\n\n```\nCrash type: Heap-buffer-overflow WRITE 1\nCrash state:\njxl::N_EMU128::WriteToU8Stage::ProcessRow\njxl::LowMemoryRenderPipeline::RenderRect\njxl::LowMemoryRenderPipeline::ProcessBuffers\n```\n","affected":[{"package":{"name":"libjxl","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libjxl"},"ranges":[{"type":"GIT","repo":"https://github.com/libjxl/libjxl.git","events":[{"introduced":"a50e71631cabfbdd57d540ba080ecec19b4664af"}]}],"versions":["v0.8.0rc1","v0.8.0","v0.8.1","v0.9-snapshot","v0.8.2","v0.9.0","v0.9.1","v0.9.2","v0.10.0","v0.10-snapshot","v0.10.1","v0.10.2","v0.10.3","v0.8.3","v0.9.3","v0.11-snapshot","v0.11.0","v0.10.4","v0.11.1","v0.8.4","v0.9.4","v0.10.5","v0.11.2","v0.8.5","v0.9.5","v0.12-snapshot","v0.12.0","v0.13.0"],"ecosystem_specific":{"severity":"HIGH"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libjxl/OSV-2022-725.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50295"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2023-1350.json b/data/OSS-Fuzz/OSV-2023-1350.json index a276c7b1b6..e83006ab23 100644 --- a/data/OSS-Fuzz/OSV-2023-1350.json +++ b/data/OSS-Fuzz/OSV-2023-1350.json @@ -1 +1 @@ -{"schema_version":"1.9.2","id":"OSV-2023-1350","published":"2023-12-23T00:12:38.562149Z","modified":"2026-11-09T14:30:05.750542198Z","summary":"Heap-buffer-overflow in inflate","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65236\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ninflate\nuncompress2\nuncompress\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"e6035df1d3f285af9a2e756fb428633eb7898881"}]}],"versions":["v2.1.0","v2.1.1","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2023-1350.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65236"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2023-1350","published":"2023-12-23T00:12:38.562149Z","modified":"2026-11-11T14:45:02.966375985Z","summary":"Heap-buffer-overflow in inflate","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65236\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\ninflate\nuncompress2\nuncompress\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"e6035df1d3f285af9a2e756fb428633eb7898881"}]}],"versions":["v2.1.0","v2.1.1","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2023-1350.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65236"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2023-307.json b/data/OSS-Fuzz/OSV-2023-307.json index 1c9d7a2de9..20eb639acf 100644 --- a/data/OSS-Fuzz/OSV-2023-307.json +++ b/data/OSS-Fuzz/OSV-2023-307.json @@ -1 +1 @@ -{"schema_version":"1.9.2","id":"OSV-2023-307","published":"2023-04-13T14:02:09.774988Z","modified":"2026-11-10T14:30:05.801826204Z","summary":"Heap-buffer-overflow in bit_read_BB","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57911\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nbit_read_BB\ndwg_decode_entity\ndwg_decode_OLE2FRAME_private\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"9d068534eb093790d9be1b8aa8ed47cafc7f2285"}]}],"versions":["0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.5465","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2023-307.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57911"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2023-307","published":"2023-04-13T14:02:09.774988Z","modified":"2026-11-11T14:45:03.795060395Z","summary":"Heap-buffer-overflow in bit_read_BB","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57911\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nbit_read_BB\ndwg_decode_entity\ndwg_decode_OLE2FRAME_private\n```\n","affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"9d068534eb093790d9be1b8aa8ed47cafc7f2285"}]}],"versions":["0.12.5.4685","0.12.5.4690","0.12.5.4693","0.12.5.4695","0.12.5.4697","0.12.5.4700","0.12.5.4709","0.12.5.4712","0.12.5.4715","0.12.5.4722","0.12.5.4724","0.12.5.4726","0.12.5.4731","0.12.5.4735","0.12.5.4739","0.12.5.4741","0.12.5.4743","0.12.5.4748","0.12.5.4750","0.12.5.4756","0.12.5.4760","0.12.5.4763","0.12.5.4765","0.12.5.4772","0.12.5.4776","0.12.5.4780","0.12.5.4784","0.12.5.4787","0.12.5.4797","0.12.5.4803","0.12.5.4805","0.12.5.4815","0.12.5.4820","0.12.5.4823","0.12.5.4825","0.12.5.4831","0.12.5.4833","0.12.5.4835","0.12.5.4837","0.12.5.4838","0.12.5.4852","0.12.5.4859","0.12.5.4865","0.12.5.4873","0.12.5.4881","0.12.5.4885","0.12.5.4887","0.12.5.4890","0.12.5.4893","0.12.5.4896","0.12.5.4911","0.12.5.4913","0.12.5.4915","0.12.5.4925","0.12.5.4931","0.12.5.4934","0.12.5.4937","0.12.5.4943","0.12.5.4944","0.12.5.4945","0.12.5.4959","0.12.5.4969","0.12.5.4998","0.12.5.5001","0.12.5.5002","0.12.5.5004","0.12.5.5007","0.12.5.5010","0.12.5.5016","0.12.5.5024","0.12.5.5028","0.12.5.5030","0.12.5.5035","0.12.5.5040","0.12.5.5044","0.12.5.5046","0.12.5.5050","0.12.5.5052","0.12.5.5060","0.12.5.5061","0.12.5.5066","0.12.5.5085","0.12.5.5091","0.12.5.5092","0.12.5.5093","0.12.5.5094","0.12.5.5095","0.12.5.5097","0.12.5.5101","0.12.5.5103","0.12.5.5104","0.12.5.5111","0.12.5.5122","0.12.5.5135","0.12.5.5137","0.12.5.5140","0.12.5.5142","0.12.5.5161","0.12.5.5163","0.12.5.5169","0.12.5.5170","0.12.5.5178","0.12.5.5179","0.12.5.5182","0.12.5.5183","0.12.5.5184","0.12.5.5185","0.12.5.5186","0.12.5.5195","0.12.5.5203","0.12.5.5206","0.12.5.5207","0.12.5.5227","0.12.5.5245","0.12.5.5249","0.12.5.5256","0.12.5.5269","0.12.5.5270","0.12.5.5271","0.12.5.5288","0.12.5.5314","0.12.5.5320","0.12.5.5329","0.12.5.5333","0.12.5.5334","0.12.5.5340","0.12.5.5342","0.12.5.5344","0.12.5.5348","0.12.5.5353","0.12.5.5356","0.12.5.5364","0.12.5.5377","0.12.5.5385","0.12.5.5391","0.12.5.5393","0.12.5.5395","0.12.5.5396","0.12.5.5405","0.12.5.5411","0.12.5.5415","0.12.5.5417","0.12.5.5422","0.12.5.5429","0.12.5.5432","0.12.5.5435","0.12.5.5439","0.12.5.5442","0.12.5.5445","0.12.5.5454","0.12.5.5458","0.12.5.5462","0.12.5.5469","0.12.5.5471","0.12.5.5473","0.12.5.5474","0.12.5.5487","0.12.5.5494","0.12.5.5504","0.12.5.5506","0.12.5.5513","0.12.5.5516","0.12.5.5518","0.12.5.5521","0.12.5.5528","0.12.5.5530","0.12.5.5537","0.12.5.5539","0.12.5.5544","0.12.5.5546","0.12.5.5549","0.12.5.5552","0.12.5.5554","0.12.5.5557","0.12.5.5560","0.12.5.5563","0.12.5.5570","0.12.5.5577","0.12.5.5584","0.12.5.5625","0.12.5.5646","0.12.5.5648","0.12.5.5654","0.12.5.5656","0.12.5.5660","0.12.5.5663","0.12.5.5666","0.12.5.5667","0.12.5.5668","0.12.5.5671","0.12.5.5688","0.12.5.5691","0.12.5.5697","0.12.5.5700","0.12.5.5708","0.12.5.5710","0.12.5.5712","0.12.5.5713","0.12.5.5716","0.12.5.5720","0.12.5.5721","0.12.5.5725","0.12.5.5731","0.12.5.5733","0.12.5.5741","0.12.5.5745","0.12.5.5746","0.12.5.5748","0.12.5.5751","0.12.5.5754","0.12.5.5759","0.12.5.5761","0.12.5.5764","0.12.5.5772","0.12.5.5779","0.12.5.5784","0.12.5.5787","0.12.5.5789","0.12.5.5793","0.12.5.5796","0.12.5.5799","0.12.5.5802","0.12.5.5804","0.12.5.5806","0.12.5.5809","0.12.5.5811","0.12.5.5813","0.12.5.5822","0.12.5.5827","0.12.5.5830","0.12.5.5832","0.12.5.5837","0.12.5.5845","0.12.5.5852","0.12.5.5856","0.12.5.5859","0.12.5.5862","0.12.5.5865","0.12.5.5870","0.12.5.5875","0.12.5.5877","0.12.5.5882","0.12.5.5885","0.12.5.5887","0.12.5.5889","0.12.5.5894","0.12.5.5898","0.12.5.5903","0.12.5.5907","0.12.5.5914","0.12.5.5915","0.12.5.5922","0.12.5.5949","0.12.5.5953","0.12.5.5959","0.12.5.5962","0.12.5.5968","0.12.5.5970","0.12.5.5971","0.12.5.5975","0.12.5.5982","0.12.5.6001","0.12.5.6004","0.12.5.6010","0.12.5.6013","0.12.5.6016","0.12.5.6019","0.12.5.6022","0.12.5.6023","0.12.5.6027","0.12.5.6033","0.12.5.6037","0.12.5.6040","0.12.5.6043","0.12.5.6044","0.12.5.6046","0.12.5.6055","0.12.5.6057","0.12.5.6068","0.12.5.6076","0.12.5.6077","0.12.5.6078","0.12.5.6080","0.12.5.6090","0.12.5.6096","0.12.5.6102","0.12.5.6109","0.12.5.6111","0.12.5.6113","0.12.5.6116","0.12.5.6118","0.12.5.6121","0.12.5.6127","0.12.5.6128","0.12.5.6133","0.12.5.6135","0.12.5.6138","0.12.5.6147","0.12.5.6149","0.12.5.6157","0.12.5.6160","0.12.5.6162","0.12.5.6164","0.12.5.6169","0.12.5.6171","0.12.5.6173","0.12.5.6183","0.12.5.6187","0.12.5.6191","0.12.5.6194","0.12.5.6199","0.12.5.6203","0.12.5.6205","0.12.5.6209","0.12.5.6214","0.12.5.6216","0.12.5.6220","0.12.5.6226","0.12.5.6229","0.12.5.6231","0.12.5.6236","0.12.5.6241","0.12.5.6243","0.12.5.6245","0.12.5.6248","0.12.5.6253","0.12.5.6257","0.12.5.6263","0.12.5.6269","0.12.5.6271","0.12.5.6277","0.12.5.6279","0.12.5.6285","0.12.5.6294","0.12.5.6302","0.12.5.6306","0.12.5.6310","0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585","0.12.5.6588","0.12.5.6597","0.12.5.6599","0.12.5.6605","0.12.5.6609","0.12.5.6612","0.12.5.6619","0.12.5.6622","0.12.5.6627","0.12.5.6630","0.12.5.6638","0.12.5.6640","0.12.5.6652","0.12.5.6653","0.12.5.6661","0.12.5.6664","0.12.5.6670","0.12.5.6677","0.12.5.6682","0.12.5.6688","0.12.5.6697","0.12.5.6701","0.12.5.6709","0.12.5.6714","0.12.5.6717","0.12.5.6726","0.12.5.6735","0.12.5.6739","0.12.5.6754","0.12.5.6756","0.12.5.6768","0.12.5.6776","0.12.5.6785","0.12.5.6792","0.12.5.6802","0.12.5.6811","0.12.5.6819","0.12.5.6828","0.12.5.6836","0.12.5.6843","0.12.5.6851","0.12.5.6865","0.12.5.6872","0.12.5.6891","0.12.5.6912","0.12.5.6915","0.12.5.6924","0.12.5.6926","0.12.5.6932","0.12.5.6938","0.12.5.6939","0.12.5.6945","0.12.5.6948","0.12.5.6953","0.12.5.6958","0.12.5.6962","0.12.5.6971","0.12.5.6973","0.12.5.6979","0.12.5.6984","0.12.5.6987","0.12.5.6992","0.12.5.5465","0.12.5.6996","0.13","0.13.0.7003","0.13.0.7011","0.13.0.7013","0.13.0.7031","0.13.0.7036","0.13.0.7045","0.13.0.7047","0.13.0.7050","0.13.0.7060","0.13.0.7066","0.13.0.7072","0.13.0.7081","0.13.1","0.13.1.7087","0.13.2","0.13.2.7111","0.13.2.7114","0.13.2.7117","0.13.2.7125","0.13.2.7142","0.13.2.7151","0.13.2.7153","0.13.2.7154","0.13.3","0.13.3.7163","0.13.3.7165","0.13.3.7166","0.13.3.7168","0.13.3.7176","0.13.3.7183","0.13.3.7186","0.13.3.7187","0.13.3.7190","0.13.3.7199","0.13.3.7217","0.13.3.7220","0.13.3.7223","0.13.3.7224","0.13.3.7225","0.13.3.7226","0.13.3.7227","0.13.3.7233","0.13.3.7240","0.13.3.7246","0.13.3.7251","0.13.3.7257","0.13.3.7259","0.13.3.7262","0.13.3.7264","0.13.3.7265","0.13.3.7268","0.13.3.7270","0.13.3.7273","0.13.3.7298","0.13.3.7306","0.13.3.7308","0.13.3.7311","0.13.3.7320","0.13.3.7324","0.13.3.7327","0.13.3.7338","0.13.3.7341","0.13.3.7344","0.13.3.7345","0.13.3.7351","0.13.3.7371","0.13.3.7377","0.13.3.7385","0.13.3.7405","0.13.3.7409","0.13.3.7411","0.13.3.7412","0.13.3.7414","0.13.3.7420","0.13.3.7424","0.13.3.7426","0.13.3.7429","0.13.3.7431","0.13.3.7434","0.13.3.7437","0.13.3.7442","0.13.3.7445","0.13.3.7453","0.13.3.7456","0.13.3.7460","0.13.3.7466","0.13.3.7469","0.13.3.7472","0.13.3.7473","0.13.3.7483","0.13.3.7491","0.13.3.7501","0.13.3.7507","0.13.3.7516","0.13.3.7533","0.13.3.7534","0.13.3.7535","0.13.3.7539","0.13.3.7545","0.13.3.7551","0.13.3.7552","0.13.3.7554","0.13.3.7557","0.13.3.7558","0.13.3.7562","0.13.3.7571","0.13.3.7574","0.13.3.7577","0.13.3.7582","0.13.3.7599","0.13.3.7600","0.13.3.7603","0.13.3.7635","0.13.3.7637","0.13.3.7640","0.13.3.7646","0.13.3.7649","0.13.3.7650","0.13.3.7657","0.13.3.7663","0.13.3.7665","0.13.3.7675","0.13.3.7680","0.13.3.7685","0.13.3.7686","0.13.3.7690","0.13.3.7696","0.13.3.7702","0.13.3.7715","0.13.3.7721","0.13.3.7727","0.13.3.7730","0.13.3.7737","0.13.3.7741","0.13.3.7743","0.13.3.7752","0.13.3.7761","0.13.3.7763","0.13.3.7772","0.13.3.7776","0.13.3.7778","0.13.3.7789","0.13.3.7792","0.13.3.7794","0.13.3.7797","0.13.3.7802","0.13.3.7805","0.13.3.7808","0.13.3.7810","0.13.3.7812","0.13.3.7813","0.13.3.7816","0.13.3.7819","0.13.3.7825","0.13.3.7828","0.13.3.7835","0.13.3.7842","0.13.3.7846","0.13.3.7848","0.13.3.7849","0.13.3.7850","0.13.3.7851","0.13.3.7852","0.13.3.7861","0.13.3.7867","0.13.3.7873","0.13.3.7883","0.13.3.7897","0.13.3.7901","0.13.3.7906","0.13.3.7913","0.13.3.7918","0.13.3.7928","0.13.3.7932","0.13.4.7951","0.13.4.7953","0.13.4.7958","0.13.4.7963","0.13.4.7964","0.13.4","0.13.4.7969","0.13.4.7974","0.13.4.7976","0.13.4.7985","0.13.4.7998","0.13.4.8001","0.13.4.8014","0.13.4.8018","0.13.4.8028","0.13.4.8029","0.13.4.8036","0.13.4.8043","0.13.4.8051","0.13.4.8055","0.13.4.8085","0.13.4.8091","0.13.4.8104","0.13.4.8112","0.13.4.8115","0.13.4.8118","0.13.4.8123","0.13.4.8129","0.13.4.8131","0.13.4.8140","0.13.4.8144","0.13.4.8149","0.13.4.8160","0.13.4.8163","0.13.4.8166","0.13.4.8168","0.13.4.8169","0.13.4.8171","0.13.4.8174","0.13.4.8178","0.13.4.8187","0.13.4.8198","0.13.4.8200","0.13.4.8214","0.13.4.8216","0.13.4.8229","0.13.4.8230","0.13.4.8231","0.13.4.8234","0.13.4.8236","0.13.4.8237","0.13.4.8241","0.13.4.8246","0.13.4.8249","0.13.4.8252","0.13.4.8263","0.13.4.8268","0.13.4.8270","0.13.4.8273","0.13.4.8278","0.13.4.8284","0.13.4.8285","0.13.4.8293","0.13.4.8294","0.13.4.8295","0.13.4.8302","0.13.4.8304","0.13.4.8313","0.13.4.8317","0.13.4.8321","0.13.4.8336","0.13.4.8343","0.13.4.8348","0.13.4.8351","0.13.4.8356","0.13.4.8360","0.14","0.14.8363","0.14.8367","0.14.8374","0.14.8384","0.14.8390","0.14.8394","0.14.8396","0.14.8403","0.14.8406","0.14.8411","0.14.8413","0.14.8415","0.14.8418","0.14.8421","0.14.8433","0.14.8447","0.14.8460","0.14.8464","0.14.8465","0.14.8471","0.14.8487","0.14.8488","0.14.8492","0.14.8522","0.14.8531","0.14.8544","0.14.8547","0.14.8553","0.14.8554","0.14.8556","0.14.8561","0.14.8566","0.14.8578","0.14.8580","0.14.8583","0.14.8584","0.14.8585","0.14.8590","0.14.8592","0.14.8593","0.14.8594","0.14.8597","0.14.8599","0.14.8600","0.14.8601","0.14.8607","0.14.8608","0.14.8612","0.14.8622","0.14.8623","0.14.8625","0.14.8630","0.14.8635","0.14.8639","0.14.8641","0.14.8654","0.14.8656","0.14.8676","0.14.8679","0.14.8726","0.14.8739","0.14.8744","0.14.8750","0.14.8755","0.14.8758","0.14.8761","0.14.8768","0.14.8815","0.14.8823","0.14.8829","0.14.8838","0.14.8841","0.14.8847","0.14.8848","0.14.8850","0.14.8857","0.14.8869","0.14.8878","0.14.8887","0.14.8893","0.14.8907","0.14.8913","0.14.8922","0.14.8927","0.14.8931","0.14.8933","0.14.8936"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2023-307.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57911"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2023-319.json b/data/OSS-Fuzz/OSV-2023-319.json index 466d6789dc..19c119cde0 100644 --- a/data/OSS-Fuzz/OSV-2023-319.json +++ b/data/OSS-Fuzz/OSV-2023-319.json @@ -1 +1 @@ -{"schema_version":"1.9.2","id":"OSV-2023-319","published":"2023-04-16T14:01:58.406534Z","modified":"2026-11-09T14:30:05.562634892Z","summary":"Heap-buffer-overflow in ZSTD_decompressSequencesLong_bmi2","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58035\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\nZSTD_decompressSequencesLong_bmi2\nZSTD_decompressSequencesLong\nZSTD_decompressBlock_internal\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"4a727370b1c2e9746434c00bf2236db86c31ea5c"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.10.0","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2023-319.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58035"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2023-319","published":"2023-04-16T14:01:58.406534Z","modified":"2026-11-11T14:45:03.997155309Z","summary":"Heap-buffer-overflow in ZSTD_decompressSequencesLong_bmi2","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58035\n\n```\nCrash type: Heap-buffer-overflow READ 8\nCrash state:\nZSTD_decompressSequencesLong_bmi2\nZSTD_decompressSequencesLong\nZSTD_decompressBlock_internal\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"4a727370b1c2e9746434c00bf2236db86c31ea5c"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.10.0","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2023-319.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58035"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2023-390.json b/data/OSS-Fuzz/OSV-2023-390.json index 0e693feb49..4bf3e69a2f 100644 --- a/data/OSS-Fuzz/OSV-2023-390.json +++ b/data/OSS-Fuzz/OSV-2023-390.json @@ -1 +1 @@ -{"schema_version":"1.9.2","id":"OSV-2023-390","published":"2023-05-12T14:00:08.854823Z","modified":"2026-10-28T18:00:04.475452004Z","summary":"Heap-buffer-overflow in sdhci_write","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58813\n\n```\nCrash type: Heap-buffer-overflow WRITE 1\nCrash state:\nsdhci_write\nmemory_region_write_accessor\nmemory_region_dispatch_write\n```\n","affected":[{"package":{"name":"qemu","ecosystem":"OSS-Fuzz","purl":"pkg:generic/qemu"},"ranges":[{"type":"GIT","repo":"https://git.qemu.org/git/qemu.git","events":[{"introduced":"b7a3a705b644495b7b578e94e0e9dedf93c4f661"}]}],"versions":["v7.0.0","v7.0.0-rc1","v7.0.0-rc2","v7.0.0-rc3","v7.0.0-rc4","v7.1.0","v7.1.0-rc0","v7.1.0-rc1","v7.1.0-rc2","v7.1.0-rc3","v7.1.0-rc4","v7.2.0","v7.2.0-rc0","v7.2.0-rc1","v7.2.0-rc2","v7.2.0-rc3","v7.2.0-rc4","v7.2.1","v7.2.2","v7.2.3","v7.2.4","v7.2.5","v8.0.0","v8.0.0-rc0","v8.0.0-rc1","v8.0.0-rc2","v8.0.0-rc3","v8.0.0-rc4","v8.0.1","v8.0.2","v8.0.3","v8.0.4","v8.1.0-rc0","v8.1.0-rc1","v8.1.0-rc2","v8.1.0-rc3","v8.1.0-rc4","v8.1.0","v7.2.6","v8.0.5","v8.1.1","v8.1.2","v8.2.0-rc0","v7.2.7","v8.1.3","v8.2.0-rc1","v8.2.0-rc2","v8.2.0-rc3","v8.2.0-rc4","v8.2.0","v7.2.8","v8.1.4","v7.2.9","v8.1.5","v8.2.1","v7.2.10","v8.2.2","v9.0.0-rc0","v9.0.0-rc1","v9.0.0-rc2","v9.0.0-rc3","v9.0.0-rc4","v7.2.11","v8.2.3","v9.0.0","v8.2.4","v7.2.12","v8.2.5","v9.0.1","v7.2.13","v8.2.6","v9.0.2","v9.1.0-rc0","v9.1.0-rc1","v9.1.0-rc2","v9.1.0-rc3","v9.1.0-rc4","v9.1.0","v7.2.14","v8.2.7","v9.0.3","v9.1.1","v9.2.0-rc0","v7.2.15","v8.2.8","v9.0.4","v9.1.2","v9.2.0-rc1","v9.2.0-rc2","v9.2.0-rc3","v9.2.0","v7.2.16","v8.2.9","v9.1.3","v9.2.1","v9.2.2","v10.0.0-rc0","v10.0.0-rc1","v7.2.17","v8.2.10","v9.2.3","v10.0.0-rc2","v10.0.0-rc3","v10.0.0-rc4","v10.0.0","v10.0.1","v7.2.18","v9.2.4","v10.0.2","v10.0.3","v10.1.0-rc0","v7.2.19","v10.0.4","v10.1.0","v10.1.0-rc1","v10.1.0-rc2","v10.1.0-rc3","v10.1.0-rc4","v7.2.20","v10.0.5","v10.1.1","v7.2.21","v10.0.6","v10.1.2","v10.2.0-rc1","v10.2.0-rc2","v10.0.7","v10.1.3","v7.2.22","v10.2.0-rc3","v10.2.0-rc4","v10.2.0","v10.0.8","v10.1.4","v10.2.1","v10.0.9","v10.1.5","v10.2.2","v11.0.0-rc0","v11.0.0-rc1","v11.0.0-rc2","v11.0.0-rc3","v11.0.0-rc4","v11.0.0","v10.0.10","v10.2.3","v11.0.1","v10.0.11","v10.2.4","v11.0.2","v10.0.12","v11.0.3","v11.1.0-rc0","v11.1.0-rc1","v11.1.0-rc2","v11.1.0-rc3","v11.1.0","v10.0.13","v11.0.4","v11.1.1","v10.0.14","v11.0.5","v11.1.2","v10.0.15","v11.1.3"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qemu/OSV-2023-390.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58813"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2023-390","published":"2023-05-12T14:00:08.854823Z","modified":"2026-11-11T15:15:02.464482268Z","summary":"Heap-buffer-overflow in sdhci_write","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58813\n\n```\nCrash type: Heap-buffer-overflow WRITE 1\nCrash state:\nsdhci_write\nmemory_region_write_accessor\nmemory_region_dispatch_write\n```\n","affected":[{"package":{"name":"qemu","ecosystem":"OSS-Fuzz","purl":"pkg:generic/qemu"},"ranges":[{"type":"GIT","repo":"https://git.qemu.org/git/qemu.git","events":[{"introduced":"b7a3a705b644495b7b578e94e0e9dedf93c4f661"}]}],"versions":["v7.0.0","v7.0.0-rc1","v7.0.0-rc2","v7.0.0-rc3","v7.0.0-rc4","v7.1.0","v7.1.0-rc0","v7.1.0-rc1","v7.1.0-rc2","v7.1.0-rc3","v7.1.0-rc4","v7.2.0","v7.2.0-rc0","v7.2.0-rc1","v7.2.0-rc2","v7.2.0-rc3","v7.2.0-rc4","v7.2.1","v7.2.2","v7.2.3","v7.2.4","v7.2.5","v8.0.0","v8.0.0-rc0","v8.0.0-rc1","v8.0.0-rc2","v8.0.0-rc3","v8.0.0-rc4","v8.0.1","v8.0.2","v8.0.3","v8.0.4","v8.1.0-rc0","v8.1.0-rc1","v8.1.0-rc2","v8.1.0-rc3","v8.1.0-rc4","v8.1.0","v7.2.6","v8.0.5","v8.1.1","v8.1.2","v8.2.0-rc0","v7.2.7","v8.1.3","v8.2.0-rc1","v8.2.0-rc2","v8.2.0-rc3","v8.2.0-rc4","v8.2.0","v7.2.8","v8.1.4","v7.2.9","v8.1.5","v8.2.1","v7.2.10","v8.2.2","v9.0.0-rc0","v9.0.0-rc1","v9.0.0-rc2","v9.0.0-rc3","v9.0.0-rc4","v7.2.11","v8.2.3","v9.0.0","v8.2.4","v7.2.12","v8.2.5","v9.0.1","v7.2.13","v8.2.6","v9.0.2","v9.1.0-rc0","v9.1.0-rc1","v9.1.0-rc2","v9.1.0-rc3","v9.1.0-rc4","v9.1.0","v7.2.14","v8.2.7","v9.0.3","v9.1.1","v9.2.0-rc0","v7.2.15","v8.2.8","v9.0.4","v9.1.2","v9.2.0-rc1","v9.2.0-rc2","v9.2.0-rc3","v9.2.0","v7.2.16","v8.2.9","v9.1.3","v9.2.1","v9.2.2","v10.0.0-rc0","v10.0.0-rc1","v7.2.17","v8.2.10","v9.2.3","v10.0.0-rc2","v10.0.0-rc3","v10.0.0-rc4","v10.0.0","v10.0.1","v7.2.18","v9.2.4","v10.0.2","v10.0.3","v10.1.0-rc0","v7.2.19","v10.0.4","v10.1.0","v10.1.0-rc1","v10.1.0-rc2","v10.1.0-rc3","v10.1.0-rc4","v7.2.20","v10.0.5","v10.1.1","v7.2.21","v10.0.6","v10.1.2","v10.2.0-rc1","v10.2.0-rc2","v10.0.7","v10.1.3","v7.2.22","v10.2.0-rc3","v10.2.0-rc4","v10.2.0","v10.0.8","v10.1.4","v10.2.1","v10.0.9","v10.1.5","v10.2.2","v11.0.0-rc0","v11.0.0-rc1","v11.0.0-rc2","v11.0.0-rc3","v11.0.0-rc4","v11.0.0","v10.0.10","v10.2.3","v11.0.1","v10.0.11","v10.2.4","v11.0.2","v10.0.12","v11.0.3","v11.1.0-rc0","v11.1.0-rc1","v11.1.0-rc2","v11.1.0-rc3","v11.1.0","v10.0.13","v11.0.4","v11.1.1","v10.0.14","v11.0.5","v11.1.2","v10.0.15","v11.1.3","v11.2.0-rc0"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/qemu/OSV-2023-390.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58813"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2023-606.json b/data/OSS-Fuzz/OSV-2023-606.json index 518fe3c645..0ffd6ec0fc 100644 --- a/data/OSS-Fuzz/OSV-2023-606.json +++ b/data/OSS-Fuzz/OSV-2023-606.json @@ -1 +1 @@ -{"schema_version":"1.9.2","id":"OSV-2023-606","published":"2023-07-23T14:01:02.159160Z","modified":"2026-11-09T14:45:02.591999133Z","summary":"Heap-buffer-overflow in ZSTD_decompressMultiFrame","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60778\n\n```\nCrash type: Heap-buffer-overflow READ {*}\nCrash state:\nZSTD_decompressMultiFrame\nZSTD_decompress_usingDDict\nzstd_wrap_decompress\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"4a727370b1c2e9746434c00bf2236db86c31ea5c"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2023-606.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60778"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2023-606","published":"2023-07-23T14:01:02.159160Z","modified":"2026-11-11T14:45:02.976646279Z","summary":"Heap-buffer-overflow in ZSTD_decompressMultiFrame","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60778\n\n```\nCrash type: Heap-buffer-overflow READ {*}\nCrash state:\nZSTD_decompressMultiFrame\nZSTD_decompress_usingDDict\nzstd_wrap_decompress\n```\n","affected":[{"package":{"name":"c-blosc2","ecosystem":"OSS-Fuzz","purl":"pkg:generic/c-blosc2"},"ranges":[{"type":"GIT","repo":"https://github.com/Blosc/c-blosc2.git","events":[{"introduced":"4a727370b1c2e9746434c00bf2236db86c31ea5c"}]}],"versions":["v2.0.0","v2.0.0-rc2","v2.0.0.rc1","v2.0.1","v2.0.2","v2.0.3","v2.0.4","v2.1.0","v2.1.1","v2.10.0","v2.10.1","v2.10.2","v2.10.3","v2.10.4","v2.10.5","v2.2.0","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.4.2","v2.4.3","v2.5.0","v2.6.0","v2.6.1","v2.7.0","v2.7.1","v2.8.0","v2.9.0","v2.9.1","v2.9.2","v2.9.3","v2.11.0","v2.11.1","v2.11.2","v2.11.3","v2.12.0","v2.13.0","v2.13.1","v2.13.2","v2.14.0","v2.14.1","v2.14.2","v2.14.3","v2.14.4","v2.15.0","v2.15.1","v2.15.2","v2.16.0","v2.17.0","v2.17.1","v2.18.0","v2.19.0","v2.19.1","v2.20.0","v2.21.0","v2.21.1","v2.21.2","v2.21.3","v2.22.0","v2.23.0","v2.23.1","v3.0.0.rc1","v3.0.0.rc2","v3.0.0","v3.0.1","v3.0.2","v3.0.3","v3.1.0","v3.1.1","v3.1.2","v3.1.3","v3.1.4","v3.1.5","v3.2.0","v3.2.1","v3.2.2","v3.2.3","v3.3.0","v3.3.1","v3.3.2","v3.3.3","v3.3.4","v3.3.5","v3.4.0","v3.4.1","v3.5.0","v3.6.0","v3.6.1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/c-blosc2/OSV-2023-606.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60778"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2024-914.json b/data/OSS-Fuzz/OSV-2024-914.json index c9d13c93b1..fcd0ac1785 100644 --- a/data/OSS-Fuzz/OSV-2024-914.json +++ b/data/OSS-Fuzz/OSV-2024-914.json @@ -1 +1 @@ -{"schema_version":"1.9.1","id":"OSV-2024-914","published":"2024-08-16T00:08:20.277708Z","modified":"2026-10-19T15:13:03.724140Z","summary":"UNKNOWN READ in boost::re_detail_500::basic_regex_formatter > boost::re_d\n```\n","affected":[{"package":{"name":"boost","ecosystem":"OSS-Fuzz","purl":"pkg:generic/boost"},"ranges":[{"type":"GIT","repo":"https://github.com/boostorg/boost.git","events":[{"introduced":"9072bfc2d969ca1e8c49651232817201e05e3eae"},{"introduced":"206cf016ae9454ed65e9c5faf4a322f31444fb80"}]}],"versions":["boost-1.85.0","boost-1.85.0.beta1","boost-1.86.0","boost-1.86.0.beta1","boost-1.87.0.beta1","boost-1.87.0","boost-1.88.0.beta1","boost-1.88.0","boost-1.89.0.beta1","boost-1.89.0","boost-1.90.0.beta1","boost-1.90.0","boost-1.91.0.beta1","boost-1.91.0","boost-1.91.0-1","boost-1.92.0.beta1","boost-1.92.0"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"introduced_range":"0251e5fa19564439f3d654df8d4de1abdbaa72b2:9f83dd55ea67f1bab62c20d29bc5527345aafc55","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/boost/OSV-2024-914.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66851"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"OSV-2024-914","published":"2024-08-16T00:08:20.277708Z","modified":"2026-11-11T14:45:03.240800794Z","summary":"UNKNOWN READ in boost::re_detail_500::basic_regex_formatter > boost::re_d\n```\n","affected":[{"package":{"name":"boost","ecosystem":"OSS-Fuzz","purl":"pkg:generic/boost"},"ranges":[{"type":"GIT","repo":"https://github.com/boostorg/boost.git","events":[{"introduced":"9072bfc2d969ca1e8c49651232817201e05e3eae"},{"introduced":"206cf016ae9454ed65e9c5faf4a322f31444fb80"}]}],"versions":["boost-1.85.0","boost-1.85.0.beta1","boost-1.86.0","boost-1.86.0.beta1","boost-1.87.0.beta1","boost-1.87.0","boost-1.88.0.beta1","boost-1.88.0","boost-1.89.0.beta1","boost-1.89.0","boost-1.90.0.beta1","boost-1.90.0","boost-1.91.0.beta1","boost-1.91.0","boost-1.91.0-1","boost-1.92.0.beta1","boost-1.92.0","boost-1.93.0.beta1"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"introduced_range":"0251e5fa19564439f3d654df8d4de1abdbaa72b2:9f83dd55ea67f1bab62c20d29bc5527345aafc55","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/boost/OSV-2024-914.yaml"}}],"references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66851"}]} \ No newline at end of file diff --git a/data/OSS-Fuzz/OSV-2026-1077.json b/data/OSS-Fuzz/OSV-2026-1077.json index 2297ed5624..4dd08a9fdd 100644 --- a/data/OSS-Fuzz/OSV-2026-1077.json +++ b/data/OSS-Fuzz/OSV-2026-1077.json @@ -1 +1 @@ -{"schema_version":"1.9.0","id":"OSV-2026-1077","published":"2026-07-28T07:23:02.143330Z","modified":"2026-10-20T12:16:28.898889323Z","summary":"Heap-buffer-overflow in std::__1::basic_string, std::__1::allocator, std::__1::allocator, std::__1::allocator, std::__1::allocator while the LICENSE-MIT, source tree, API, and CHANGELOG are copied verbatim from the upstream postcss-selector-parser (Ben Briggs). The tarball ships dist/util/webpack.min.js, a ~40KB obfuscator.io-packed bundle with a rotated 757-entry string array and an RC4+base64+XOR string decoder, whose top-level IIFE destructures exec and execSync from child_process, branches on values returned by the os module, and calls process.exit(1) on specific conditions. A CSS-selector parser has no functional need for child_process shell execution. Additionally, propPaths.js and selectors/wrapper.js reconstruct filenames such as 'wrapper.js' and the extension '.jsc' from CSS-hex-escape sequences via an unesc helper, and the package declares bytenode as a runtime dependency; bytenode registers a require hook for opaque V8-bytecode.jsc files, providing a loader path for code that cannot be inspected as source. The combination — impersonated identity, obfuscated child_process-execution bundle, and hex-obfuscated bytenode load scaffolding — is a supply-chain attack shape targeting developers who intended to install postcss-selector-parser.\n","affected":[{"package":{"name":"selparsecss-selector","ecosystem":"npm","purl":"pkg:npm/selparsecss-selector"},"versions":["1.1.0","2.0.0","1.0.0","2.1.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"dist/parser.js","sha256":"dcbf3f76ce3b9f4983a36f70b14ce93065975b17ab9420ea739908256545d087","tlsh":"16230e5a9dfb10299223b5bc2f6f64147638810b0548d81c7d9cc2d0afe056987abffd"},{"path":"dist/util/webpack.min.js","sha256":"c93812164247893d4d4d9b9ef125cec5dbc9abef21400a4db1c7aa65bbe5c369","tlsh":"d2033cadb5eaf691127368a51d9b3517a5eb78c13005d802deb8588c3c6372cf1e3dac"},{"path":"package.json","sha256":"aaf813fbc12b022d55b2d0f7ef83dd796d9aa2427649d1da0d102680442f0ff7","tlsh":"fa319921dc594c2325ee65aa3ca8a211b530c457ce88fc6873c4411c2f1da6f69ba8ae"}],"package_integrity":[{"filename":"selparsecss-selector-1.1.0.tgz","hashes":{"sha1":"c4d1f8814e41f55a5ae22cb28a4f9cd4171ecc14","sha512_sri":"sha512-/r3RwVTR4AehaS6so4mZLcCyJO8zypEgCrzlrx/wlhyKoqQpgppSh0RqBfqKeYEH6fcr/h6xtCeUIMsJ9/26kw=="}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/selparsecss-selector/MAL-2026-10687.json"}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/selparsecss-selector/v/1.1.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/selparsecss-selector/v/2.0.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/selparsecss-selector/v/1.0.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/selparsecss-selector/v/2.1.0"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-010686","import_time":"2026-07-15T17:59:56.223638056Z","modified_time":"2026-07-15T17:54:33Z","sha256":"410937a56e887da6bbd58478fa87b0ad0d4bf7d7074bc79f9c28e53d2615ffbd","source":"amazon-inspector","versions":["1.1.0"]},{"id":"IN-MAL-2026-010688","import_time":"2026-07-15T17:59:56.418114424Z","modified_time":"2026-07-15T17:55:13Z","sha256":"431ad1bb3fe03628a36206d3b32706c18c40e8f2471d88ce5c7f8550005a6fde","source":"amazon-inspector","versions":["2.0.0"]},{"id":"IN-MAL-2026-010687","import_time":"2026-07-15T17:59:56.336203066Z","modified_time":"2026-07-15T17:54:44Z","sha256":"464e8f88d8ae9eb9994a91abed0f03e697144d142315afcc59571f579db2ad34","source":"amazon-inspector","versions":["1.0.0"]},{"id":"IN-MAL-2026-010689","import_time":"2026-07-15T17:59:56.497420135Z","modified_time":"2026-07-15T17:55:34Z","sha256":"f4f8e230628f3622bf88bcd590f98f8065a99ea3e71ef1bf3c330439b7671e1f","source":"amazon-inspector","versions":["2.1.0"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"MAL-2026-10687","published":"2026-07-15T17:54:33Z","modified":"2026-11-11T16:31:46.041469445Z","aliases":["GHSA-pg6x-gj9c-922c"],"summary":"Malicious code in selparsecss-selector (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (f4f8e230628f3622bf88bcd590f98f8065a99ea3e71ef1bf3c330439b7671e1f)\nselparsecss-selector@2.1.0 is a name-confusion fork of postcss-selector-parser: package.json declares author 'Ai Pyramid' while the LICENSE-MIT, source tree, API, and CHANGELOG are copied verbatim from the upstream postcss-selector-parser (Ben Briggs). The tarball ships dist/util/webpack.min.js, a ~40KB obfuscator.io-packed bundle with a rotated 757-entry string array and an RC4+base64+XOR string decoder, whose top-level IIFE destructures exec and execSync from child_process, branches on values returned by the os module, and calls process.exit(1) on specific conditions. A CSS-selector parser has no functional need for child_process shell execution. Additionally, propPaths.js and selectors/wrapper.js reconstruct filenames such as 'wrapper.js' and the extension '.jsc' from CSS-hex-escape sequences via an unesc helper, and the package declares bytenode as a runtime dependency; bytenode registers a require hook for opaque V8-bytecode.jsc files, providing a loader path for code that cannot be inspected as source. The combination — impersonated identity, obfuscated child_process-execution bundle, and hex-obfuscated bytenode load scaffolding — is a supply-chain attack shape targeting developers who intended to install postcss-selector-parser.\n\n## Source: ghsa-malware (71610d10311b2ae1cfc5883ce92c047b73a466f928054f0e1aa2be09f486e4fe)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"selparsecss-selector","ecosystem":"npm","purl":"pkg:npm/selparsecss-selector"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["1.1.0","2.0.0","1.0.0","2.1.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"dist/parser.js","sha256":"dcbf3f76ce3b9f4983a36f70b14ce93065975b17ab9420ea739908256545d087","tlsh":"16230e5a9dfb10299223b5bc2f6f64147638810b0548d81c7d9cc2d0afe056987abffd"},{"path":"dist/util/webpack.min.js","sha256":"c93812164247893d4d4d9b9ef125cec5dbc9abef21400a4db1c7aa65bbe5c369","tlsh":"d2033cadb5eaf691127368a51d9b3517a5eb78c13005d802deb8588c3c6372cf1e3dac"},{"path":"package.json","sha256":"aaf813fbc12b022d55b2d0f7ef83dd796d9aa2427649d1da0d102680442f0ff7","tlsh":"fa319921dc594c2325ee65aa3ca8a211b530c457ce88fc6873c4411c2f1da6f69ba8ae"}],"package_integrity":[{"filename":"selparsecss-selector-1.1.0.tgz","hashes":{"sha1":"c4d1f8814e41f55a5ae22cb28a4f9cd4171ecc14","sha512_sri":"sha512-/r3RwVTR4AehaS6so4mZLcCyJO8zypEgCrzlrx/wlhyKoqQpgppSh0RqBfqKeYEH6fcr/h6xtCeUIMsJ9/26kw=="}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/selparsecss-selector/MAL-2026-10687.json"}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/selparsecss-selector/v/1.1.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/selparsecss-selector/v/2.0.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/selparsecss-selector/v/1.0.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/selparsecss-selector/v/2.1.0"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-pg6x-gj9c-922c"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-010686","import_time":"2026-07-15T17:59:56.223638056Z","modified_time":"2026-07-15T17:54:33Z","sha256":"410937a56e887da6bbd58478fa87b0ad0d4bf7d7074bc79f9c28e53d2615ffbd","source":"amazon-inspector","versions":["1.1.0"]},{"id":"IN-MAL-2026-010688","import_time":"2026-07-15T17:59:56.418114424Z","modified_time":"2026-07-15T17:55:13Z","sha256":"431ad1bb3fe03628a36206d3b32706c18c40e8f2471d88ce5c7f8550005a6fde","source":"amazon-inspector","versions":["2.0.0"]},{"id":"IN-MAL-2026-010687","import_time":"2026-07-15T17:59:56.336203066Z","modified_time":"2026-07-15T17:54:44Z","sha256":"464e8f88d8ae9eb9994a91abed0f03e697144d142315afcc59571f579db2ad34","source":"amazon-inspector","versions":["1.0.0"]},{"id":"IN-MAL-2026-010689","import_time":"2026-07-15T17:59:56.497420135Z","modified_time":"2026-07-15T17:55:34Z","sha256":"f4f8e230628f3622bf88bcd590f98f8065a99ea3e71ef1bf3c330439b7671e1f","source":"amazon-inspector","versions":["2.1.0"]},{"id":"GHSA-pg6x-gj9c-922c","import_time":"2026-11-11T16:18:54.772619289Z","modified_time":"2026-11-11T16:08:55Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"71610d10311b2ae1cfc5883ce92c047b73a466f928054f0e1aa2be09f486e4fe","source":"ghsa-malware"}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]} \ No newline at end of file diff --git a/data/npm/MAL-2026-11205.json b/data/npm/MAL-2026-11205.json index 0934144e29..4baca225c1 100644 --- a/data/npm/MAL-2026-11205.json +++ b/data/npm/MAL-2026-11205.json @@ -1 +1 @@ -{"schema_version":"1.8.0","id":"MAL-2026-11205","published":"2026-06-17T07:56:44Z","modified":"2026-08-05T06:36:26.461611603Z","summary":"Malicious code in redis-type-xyz (npm)","details":"The redis-type-xyz package is an empty impersonation of Redis OM. It copies the redis-om-node repository, homepage, author, documentation, and declared dist/index.js entry point, but the published archive does not contain the declared dist directory or any usable implementation. Its dependency list replaces the legitimate ulid package used by Redis OM with ulid-xyz@^2.12.2.\n\nInstalling redis-type-xyz therefore installs the known-malicious ulid-xyz dependency. The ulid-xyz postinstall hook launches a detached background agent that decodes a WebSocket and HTTP C2 endpoint at 95.216.232.162:8010. The agent supports system information collection, drive and directory enumeration, removal, and deploy_binary tasks. deploy_binary writes attacker-supplied Base64 content to disk, registers persistence on Windows, macOS, or Linux, and launches the replacement agent. The malicious ulid-xyz dependency is independently tracked as MAL-2026-6672. redis-type-xyz is a separate delivery package that intentionally substitutes the known-malicious dependency into an otherwise copied Redis OM manifest.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (c9c8e39757a709b00e180a43959cd14e8cd36922e2f3b9a19f75046bd79e767c)\nPackage is published as 'redis-type-xyz' but its README markets itself as 'redis-type-os', uses Redis branding/logo, and declares its repository as github:redis/redis-om-node — impersonating Redis's official redis-om library. The package's package.json declares main as 'dist/index.js' and types as './dist/index.d.ts', but no dist/ directory is present in the tarball, so require('redis-type-xyz') will throw MODULE_NOT_FOUND. The package is not a functional library. Its only on-install effect is dependency resolution: it declares a runtime dependency on 'ulid-xyz' (^2.12.2), a name-confusion variant of the legitimate 'ulid' package. Any consumer installing redis-type-xyz will transitively pull ulid-xyz from an unrelated publisher. The naming pattern (impersonation of a well-known library + a sibling 'xyz'-suffixed dep mirroring a popular package) is a name-confusion / namespace-lure shape, but the contents of ulid-xyz itself were not analyzed in this record and no installer-harm payload (exfiltration, install hooks, credential reads) is observed in the parent package's tarball. Routing to human review to assess intent of the ulid-xyz transitive and the impersonation pattern.\n","affected":[{"package":{"name":"redis-type-xyz","ecosystem":"npm","purl":"pkg:npm/redis-type-xyz"},"versions":["1.10.6"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"package.json","sha256":"c698bc70282cbfac788a1943705c48de24aeb72719685d5a8b612bf95e68fe0f","tlsh":"d9317a23c92ace231ef8d265bc7a8509f572870f61a0dc0b71f606ac4f7b553146ab39"}],"package_integrity":[{"filename":"redis-type-xyz-1.10.6.tgz","hashes":{"sha1":"2b2a0b0fe287e146746bb2d1f8c0bfe815b9dee4","sha256":"4622e00da62916d607bf31debabc50e6205dafba1097c55cd9999c8cfa2dc430","sha512_sri":"sha512-ftmh6iA2ffuDaKwdQDOQJOzYAHI4cfbNI8Sb0oTHbx/bTv6KIaqlHcNi12HhHLHNh6bnqYG7ylOGU77MW2WNGg=="}}]},"iocs":{"ips":["95.216.232.162"],"urls":["ws://95.216.232.162:8010/","http://95.216.232.162:8010/"]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/redis-type-xyz/MAL-2026-11205.json"}}],"references":[{"type":"WEB","url":"https://www.npmjs.com/package/redis-type-xyz/v/1.10.6"},{"type":"ADVISORY","url":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/ulid-xyz/MAL-2026-6672.json"},{"type":"REPORT","url":"https://github.com/ossf/malicious-packages/issues/1373"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/redis-type-xyz/v/1.10.6"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-012932","import_time":"2026-08-05T06:00:21.275876484Z","modified_time":"2026-08-05T05:09:57Z","sha256":"c9c8e39757a709b00e180a43959cd14e8cd36922e2f3b9a19f75046bd79e767c","source":"amazon-inspector","versions":["1.10.6"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"YoSheep","contact":["https://github.com/YoSheep"],"type":"FINDER"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"MAL-2026-11205","published":"2026-06-17T07:56:44Z","modified":"2026-11-11T16:31:27.173904054Z","aliases":["GHSA-vx4h-jq4c-3vg2"],"summary":"Malicious code in redis-type-xyz (npm)","details":"The redis-type-xyz package is an empty impersonation of Redis OM. It copies the redis-om-node repository, homepage, author, documentation, and declared dist/index.js entry point, but the published archive does not contain the declared dist directory or any usable implementation. Its dependency list replaces the legitimate ulid package used by Redis OM with ulid-xyz@^2.12.2.\n\nInstalling redis-type-xyz therefore installs the known-malicious ulid-xyz dependency. The ulid-xyz postinstall hook launches a detached background agent that decodes a WebSocket and HTTP C2 endpoint at 95.216.232.162:8010. The agent supports system information collection, drive and directory enumeration, removal, and deploy_binary tasks. deploy_binary writes attacker-supplied Base64 content to disk, registers persistence on Windows, macOS, or Linux, and launches the replacement agent. The malicious ulid-xyz dependency is independently tracked as MAL-2026-6672. redis-type-xyz is a separate delivery package that intentionally substitutes the known-malicious dependency into an otherwise copied Redis OM manifest.\n\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (c9c8e39757a709b00e180a43959cd14e8cd36922e2f3b9a19f75046bd79e767c)\nPackage is published as 'redis-type-xyz' but its README markets itself as 'redis-type-os', uses Redis branding/logo, and declares its repository as github:redis/redis-om-node — impersonating Redis's official redis-om library. The package's package.json declares main as 'dist/index.js' and types as './dist/index.d.ts', but no dist/ directory is present in the tarball, so require('redis-type-xyz') will throw MODULE_NOT_FOUND. The package is not a functional library. Its only on-install effect is dependency resolution: it declares a runtime dependency on 'ulid-xyz' (^2.12.2), a name-confusion variant of the legitimate 'ulid' package. Any consumer installing redis-type-xyz will transitively pull ulid-xyz from an unrelated publisher. The naming pattern (impersonation of a well-known library + a sibling 'xyz'-suffixed dep mirroring a popular package) is a name-confusion / namespace-lure shape, but the contents of ulid-xyz itself were not analyzed in this record and no installer-harm payload (exfiltration, install hooks, credential reads) is observed in the parent package's tarball. Routing to human review to assess intent of the ulid-xyz transitive and the impersonation pattern.\n\n## Source: ghsa-malware (71db19ac3ec47ea1efc7f19a2f75fddfbc9d68f3bd0da53018f666da5616dbae)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"redis-type-xyz","ecosystem":"npm","purl":"pkg:npm/redis-type-xyz"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["1.10.6"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"package.json","sha256":"c698bc70282cbfac788a1943705c48de24aeb72719685d5a8b612bf95e68fe0f","tlsh":"d9317a23c92ace231ef8d265bc7a8509f572870f61a0dc0b71f606ac4f7b553146ab39"}],"package_integrity":[{"filename":"redis-type-xyz-1.10.6.tgz","hashes":{"sha1":"2b2a0b0fe287e146746bb2d1f8c0bfe815b9dee4","sha256":"4622e00da62916d607bf31debabc50e6205dafba1097c55cd9999c8cfa2dc430","sha512_sri":"sha512-ftmh6iA2ffuDaKwdQDOQJOzYAHI4cfbNI8Sb0oTHbx/bTv6KIaqlHcNi12HhHLHNh6bnqYG7ylOGU77MW2WNGg=="}}]},"iocs":{"ips":["95.216.232.162"],"urls":["ws://95.216.232.162:8010/","http://95.216.232.162:8010/"]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/redis-type-xyz/MAL-2026-11205.json"}}],"references":[{"type":"WEB","url":"https://www.npmjs.com/package/redis-type-xyz/v/1.10.6"},{"type":"ADVISORY","url":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/ulid-xyz/MAL-2026-6672.json"},{"type":"REPORT","url":"https://github.com/ossf/malicious-packages/issues/1373"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/redis-type-xyz/v/1.10.6"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-vx4h-jq4c-3vg2"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-012932","import_time":"2026-08-05T06:00:21.275876484Z","modified_time":"2026-08-05T05:09:57Z","sha256":"c9c8e39757a709b00e180a43959cd14e8cd36922e2f3b9a19f75046bd79e767c","source":"amazon-inspector","versions":["1.10.6"]},{"id":"GHSA-vx4h-jq4c-3vg2","import_time":"2026-11-11T16:18:54.784383393Z","modified_time":"2026-11-11T15:49:53Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"71db19ac3ec47ea1efc7f19a2f75fddfbc9d68f3bd0da53018f666da5616dbae","source":"ghsa-malware"}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"YoSheep","contact":["https://github.com/YoSheep"],"type":"FINDER"}]} \ No newline at end of file diff --git a/data/npm/MAL-2026-16053.json b/data/npm/MAL-2026-16053.json index f955a9ab63..8fca2c05cf 100644 --- a/data/npm/MAL-2026-16053.json +++ b/data/npm/MAL-2026-16053.json @@ -1 +1 @@ -{"schema_version":"1.9.0","id":"MAL-2026-16053","published":"2026-09-09T00:27:12Z","modified":"2026-09-09T01:00:05.002081678Z","summary":"Malicious code in file-type-detector (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (04917bd7fc156dcb9793cb1f1d06ed0f2d0cb1b3aa4b04431dea54ed71f6be72)\nA clone of file-type-checker with one function added: isSign(name, moduleName, offset) in dist/validation/image.js reads public/${name}.png from the working directory, splits the buffer at -offset, and writes the trailing payload to../../../{moduleName}/log - a sibling package under node_modules - then returns isPNG() so the caller sees a plausible boolean. It is undocumented, reachable only via an __exportStar wildcard so it is never named in dist/index.js, and fails silently on try/catch.\n\nDrop stage of a three-package chain: file-type-detector writes the payload, gloggo (1.1.2-1.1.4) executes it via require('./log'), and sonmors (typosquat of sonner) triggers the chain by requiring gloggo. gloggo shares the npm publisher log-developer and was published five minutes apart on 2026-08-27. No install hooks; execution occurs on require().\n","affected":[{"package":{"name":"file-type-detector","ecosystem":"npm","purl":"pkg:npm/file-type-detector"},"versions":["1.1.0","1.1.1"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"package_integrity":[{"filename":"file-type-detector-1.1.0.tgz","hashes":{"sha1":"c3452c877f280788620ba728592d5dac71c2958d","sha512_sri":"sha512-xrefg9CLEpfg+lb5YVdyFHlsV/ZF8Xrt+MsYSAkj38bJmbZ28a3ZgBP0ETKAIs6AQOMgqGp2WHIPpwhLGjapAw=="}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/file-type-detector/MAL-2026-16053.json"}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/file-type-detector/v/1.1.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/file-type-detector/v/1.1.1"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-019729","import_time":"2026-09-09T00:47:58.112210798Z","modified_time":"2026-09-09T00:27:12Z","sha256":"04917bd7fc156dcb9793cb1f1d06ed0f2d0cb1b3aa4b04431dea54ed71f6be72","source":"amazon-inspector","versions":["1.1.0"]},{"id":"IN-MAL-2026-019730","import_time":"2026-09-09T00:47:58.190429304Z","modified_time":"2026-09-09T00:27:22Z","sha256":"71bc73a30f67553cd6a23058191a0e93333a056cbcb85896fbfc87b2e3a4e477","source":"amazon-inspector","versions":["1.1.1"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"MAL-2026-16053","published":"2026-09-09T00:27:12Z","modified":"2026-11-11T16:31:43.815376434Z","aliases":["GHSA-fw6v-88vw-pqr3"],"summary":"Malicious code in file-type-detector (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (04917bd7fc156dcb9793cb1f1d06ed0f2d0cb1b3aa4b04431dea54ed71f6be72)\nA clone of file-type-checker with one function added: isSign(name, moduleName, offset) in dist/validation/image.js reads public/${name}.png from the working directory, splits the buffer at -offset, and writes the trailing payload to../../../{moduleName}/log - a sibling package under node_modules - then returns isPNG() so the caller sees a plausible boolean. It is undocumented, reachable only via an __exportStar wildcard so it is never named in dist/index.js, and fails silently on try/catch.\n\nDrop stage of a three-package chain: file-type-detector writes the payload, gloggo (1.1.2-1.1.4) executes it via require('./log'), and sonmors (typosquat of sonner) triggers the chain by requiring gloggo. gloggo shares the npm publisher log-developer and was published five minutes apart on 2026-08-27. No install hooks; execution occurs on require().\n\n## Source: ghsa-malware (cf4b330143b17fd8c5b2c9b3ea655e4d8ab79266aa54faefc66369c49343d020)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"file-type-detector","ecosystem":"npm","purl":"pkg:npm/file-type-detector"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["1.1.0","1.1.1"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"package_integrity":[{"filename":"file-type-detector-1.1.0.tgz","hashes":{"sha1":"c3452c877f280788620ba728592d5dac71c2958d","sha512_sri":"sha512-xrefg9CLEpfg+lb5YVdyFHlsV/ZF8Xrt+MsYSAkj38bJmbZ28a3ZgBP0ETKAIs6AQOMgqGp2WHIPpwhLGjapAw=="}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/file-type-detector/MAL-2026-16053.json"}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/file-type-detector/v/1.1.0"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/file-type-detector/v/1.1.1"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-fw6v-88vw-pqr3"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-019729","import_time":"2026-09-09T00:47:58.112210798Z","modified_time":"2026-09-09T00:27:12Z","sha256":"04917bd7fc156dcb9793cb1f1d06ed0f2d0cb1b3aa4b04431dea54ed71f6be72","source":"amazon-inspector","versions":["1.1.0"]},{"id":"IN-MAL-2026-019730","import_time":"2026-09-09T00:47:58.190429304Z","modified_time":"2026-09-09T00:27:22Z","sha256":"71bc73a30f67553cd6a23058191a0e93333a056cbcb85896fbfc87b2e3a4e477","source":"amazon-inspector","versions":["1.1.1"]},{"id":"GHSA-fw6v-88vw-pqr3","import_time":"2026-11-11T16:18:54.765865808Z","modified_time":"2026-11-11T16:07:40Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"cf4b330143b17fd8c5b2c9b3ea655e4d8ab79266aa54faefc66369c49343d020","source":"ghsa-malware"}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]} \ No newline at end of file diff --git a/data/npm/MAL-2026-16054.json b/data/npm/MAL-2026-16054.json index 7d90a1c6b2..4235f3c89e 100644 --- a/data/npm/MAL-2026-16054.json +++ b/data/npm/MAL-2026-16054.json @@ -1 +1 @@ -{"schema_version":"1.9.0","id":"MAL-2026-16054","published":"2026-09-09T00:16:27Z","modified":"2026-09-09T01:00:04.992786283Z","summary":"Malicious code in gloggo (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (a333f8ded17af0754357d938933ee95e9ab1f857cc875948d49cb9b26992e75d)\ngloggo impersonates the legitimate gulpjs 'glogg' logging library by copying its README, shields, and LICENSE text (attributed to Blaine Bublitz), while package.json attributes authorship to 'Blockvora Team ' with repository 'blockvora/gloggo'. The package name is a one-character variant of 'glogg'. getLogger() invokes isSign('favorite','gloggo',12467) from the dependency 'file-type-detector' and, when that gate returns truthy, executes require('./log'). The './log' module is not present in the tarball, so its bytes must be produced or supplied at require time by the dependency. A logging utility has no legitimate reason to gate its loader on an opaque file-signature check from an unrelated third-party dependency, and the gated path executes code that is not part of the shipped package contents. Consumers who install gloggo believing it to be glogg import a typosquat that conditionally runs code sourced from a suspicious sibling dependency when the module is required.\n","affected":[{"package":{"name":"gloggo","ecosystem":"npm","purl":"pkg:npm/gloggo"},"versions":["1.1.3","1.1.4","1.1.2"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"index.js","sha256":"244f714c904187298d10bbef8a6df888097f7090aa8949f8c87b836549e333bd","tlsh":"8c21ee765af6b1536d3b74a5960e670235b9c0d7401ceb4139ece3812f68c380b76bd8"},{"path":"package.json","sha256":"74aeaf049db1e557f320a380b3d7a78ab3dee9b13cafde57a04e6241290b3814","tlsh":"3b110611ce789ca342d8a2ae781e02c265755d9348c9fd0cb79a530c0f5e52f64fd5ac"}],"package_integrity":[{"filename":"gloggo-1.1.3.tgz","hashes":{"sha1":"28199903616edb2524c2e305f055bced94a2f791","sha512_sri":"sha512-bgoTi37QcXFMtf6kmmq8SOJNPONIFVc1QJw2HiVG5A4l7zxBsoJ8zM2yKdML4tBZ/gnZFjNBhyCSyRPU25xRBg=="}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/gloggo/MAL-2026-16054.json"}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/gloggo/v/1.1.3"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/gloggo/v/1.1.4"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/gloggo/v/1.1.2"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-019727","import_time":"2026-09-09T00:47:57.934844705Z","modified_time":"2026-09-09T00:16:34Z","sha256":"4b6a7344a560f0fa4e00d334efef568cd34c3800101315a95f647dabc8285fb1","source":"amazon-inspector","versions":["1.1.3"]},{"id":"IN-MAL-2026-019726","import_time":"2026-09-09T00:47:57.874027179Z","modified_time":"2026-09-09T00:16:27Z","sha256":"6bacf73012ce6ed828bddaf332d26ae8289b5585ea886cfc85852ac0d647282e","source":"amazon-inspector","versions":["1.1.4"]},{"id":"IN-MAL-2026-019728","import_time":"2026-09-09T00:47:58.012084713Z","modified_time":"2026-09-09T00:16:41Z","sha256":"a333f8ded17af0754357d938933ee95e9ab1f857cc875948d49cb9b26992e75d","source":"amazon-inspector","versions":["1.1.2"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"MAL-2026-16054","published":"2026-09-09T00:16:27Z","modified":"2026-11-11T16:31:43.383626617Z","aliases":["GHSA-pxm8-xf8x-r9mj"],"summary":"Malicious code in gloggo (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (a333f8ded17af0754357d938933ee95e9ab1f857cc875948d49cb9b26992e75d)\ngloggo impersonates the legitimate gulpjs 'glogg' logging library by copying its README, shields, and LICENSE text (attributed to Blaine Bublitz), while package.json attributes authorship to 'Blockvora Team ' with repository 'blockvora/gloggo'. The package name is a one-character variant of 'glogg'. getLogger() invokes isSign('favorite','gloggo',12467) from the dependency 'file-type-detector' and, when that gate returns truthy, executes require('./log'). The './log' module is not present in the tarball, so its bytes must be produced or supplied at require time by the dependency. A logging utility has no legitimate reason to gate its loader on an opaque file-signature check from an unrelated third-party dependency, and the gated path executes code that is not part of the shipped package contents. Consumers who install gloggo believing it to be glogg import a typosquat that conditionally runs code sourced from a suspicious sibling dependency when the module is required.\n\n## Source: ghsa-malware (4f6786e47a7ec7789612992189f5ba8613d0b1c39a200b5a8b07ac2badf3a5df)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"gloggo","ecosystem":"npm","purl":"pkg:npm/gloggo"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["1.1.3","1.1.4","1.1.2"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"index.js","sha256":"244f714c904187298d10bbef8a6df888097f7090aa8949f8c87b836549e333bd","tlsh":"8c21ee765af6b1536d3b74a5960e670235b9c0d7401ceb4139ece3812f68c380b76bd8"},{"path":"package.json","sha256":"74aeaf049db1e557f320a380b3d7a78ab3dee9b13cafde57a04e6241290b3814","tlsh":"3b110611ce789ca342d8a2ae781e02c265755d9348c9fd0cb79a530c0f5e52f64fd5ac"}],"package_integrity":[{"filename":"gloggo-1.1.3.tgz","hashes":{"sha1":"28199903616edb2524c2e305f055bced94a2f791","sha512_sri":"sha512-bgoTi37QcXFMtf6kmmq8SOJNPONIFVc1QJw2HiVG5A4l7zxBsoJ8zM2yKdML4tBZ/gnZFjNBhyCSyRPU25xRBg=="}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/gloggo/MAL-2026-16054.json"}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/gloggo/v/1.1.3"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/gloggo/v/1.1.4"},{"type":"PACKAGE","url":"https://www.npmjs.com/package/gloggo/v/1.1.2"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-pxm8-xf8x-r9mj"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-019727","import_time":"2026-09-09T00:47:57.934844705Z","modified_time":"2026-09-09T00:16:34Z","sha256":"4b6a7344a560f0fa4e00d334efef568cd34c3800101315a95f647dabc8285fb1","source":"amazon-inspector","versions":["1.1.3"]},{"id":"IN-MAL-2026-019726","import_time":"2026-09-09T00:47:57.874027179Z","modified_time":"2026-09-09T00:16:27Z","sha256":"6bacf73012ce6ed828bddaf332d26ae8289b5585ea886cfc85852ac0d647282e","source":"amazon-inspector","versions":["1.1.4"]},{"id":"IN-MAL-2026-019728","import_time":"2026-09-09T00:47:58.012084713Z","modified_time":"2026-09-09T00:16:41Z","sha256":"a333f8ded17af0754357d938933ee95e9ab1f857cc875948d49cb9b26992e75d","source":"amazon-inspector","versions":["1.1.2"]},{"id":"GHSA-pxm8-xf8x-r9mj","import_time":"2026-11-11T16:18:54.775868005Z","modified_time":"2026-11-11T16:07:47Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"4f6786e47a7ec7789612992189f5ba8613d0b1c39a200b5a8b07ac2badf3a5df","source":"ghsa-malware"}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]} \ No newline at end of file diff --git a/data/npm/MAL-2026-16069.json b/data/npm/MAL-2026-16069.json index c1a7ead97a..9487bb8f58 100644 --- a/data/npm/MAL-2026-16069.json +++ b/data/npm/MAL-2026-16069.json @@ -1 +1 @@ -{"schema_version":"1.9.0","id":"MAL-2026-16069","published":"2026-09-09T04:04:10Z","modified":"2026-09-09T04:30:06.402432623Z","summary":"Malicious code in reactlogo-load (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (a0f9d76fcf9f229c0a11508004a2be764133c6195530c4d56563eb28c358ab5f)\nThe package presents itself as a logo/color utility but its exported loadLogo() function extracts a URL from LSB-encoded bits of a PNG, fetches the response body, and executes it via a reflective Function-constructor invocation. The 'constructor' property name and the Function reference are hidden behind a deterministic string-shuffle helper (hsvMean) named as a color utility, so no plaintext 'constructor', 'Function', 'eval', or destination URL appears in the source. runInContext binds global.require, module, and exports into the executed script, giving the fetched code full Node runtime capability on the caller's host. Following the README's documented usage (vite/tailwind build integration) triggers the fetch-and-execute path, so arbitrary attacker-controlled code runs on any machine that adopts this library.\n","affected":[{"package":{"name":"reactlogo-load","ecosystem":"npm","purl":"pkg:npm/reactlogo-load"},"versions":["1.0.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"dist/index.js","sha256":"893a50335df880baa9bc6c8b0bfeef3acda3378fa6966b0f092ddd6a6a6d6cf8","tlsh":"de92956932f7602a4163a0b8451fc81f77296803325fc994fb6c96d03fc92789af3ad5"}],"package_integrity":[{"filename":"reactlogo-load-1.0.0.tgz","hashes":{"sha1":"979bbb0325f4031046b55ff7891939535d4b1e22","sha512_sri":"sha512-DwVU0Bqa7zv8o/qS1fHKLtcz5qa8HIunZwwlHfqTm0CF65oXk37llCPjxbBeHHOuil8O7aJssXn2663nR1Bfkw=="}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/reactlogo-load/MAL-2026-16069.json"}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/reactlogo-load/v/1.0.0"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-019836","import_time":"2026-09-09T04:21:44.902097712Z","modified_time":"2026-09-09T04:04:10Z","sha256":"a0f9d76fcf9f229c0a11508004a2be764133c6195530c4d56563eb28c358ab5f","source":"amazon-inspector","versions":["1.0.0"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"MAL-2026-16069","published":"2026-09-09T04:04:10Z","modified":"2026-11-11T16:31:01.987557807Z","aliases":["GHSA-8wjj-jqj4-3p7j"],"summary":"Malicious code in reactlogo-load (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (a0f9d76fcf9f229c0a11508004a2be764133c6195530c4d56563eb28c358ab5f)\nThe package presents itself as a logo/color utility but its exported loadLogo() function extracts a URL from LSB-encoded bits of a PNG, fetches the response body, and executes it via a reflective Function-constructor invocation. The 'constructor' property name and the Function reference are hidden behind a deterministic string-shuffle helper (hsvMean) named as a color utility, so no plaintext 'constructor', 'Function', 'eval', or destination URL appears in the source. runInContext binds global.require, module, and exports into the executed script, giving the fetched code full Node runtime capability on the caller's host. Following the README's documented usage (vite/tailwind build integration) triggers the fetch-and-execute path, so arbitrary attacker-controlled code runs on any machine that adopts this library.\n\n## Source: ghsa-malware (b601f039e88a447643c767a9b373a4c29abccb87e1bbfa2ab82e3d8c767b5d56)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"reactlogo-load","ecosystem":"npm","purl":"pkg:npm/reactlogo-load"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["1.0.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"dist/index.js","sha256":"893a50335df880baa9bc6c8b0bfeef3acda3378fa6966b0f092ddd6a6a6d6cf8","tlsh":"de92956932f7602a4163a0b8451fc81f77296803325fc994fb6c96d03fc92789af3ad5"}],"package_integrity":[{"filename":"reactlogo-load-1.0.0.tgz","hashes":{"sha1":"979bbb0325f4031046b55ff7891939535d4b1e22","sha512_sri":"sha512-DwVU0Bqa7zv8o/qS1fHKLtcz5qa8HIunZwwlHfqTm0CF65oXk37llCPjxbBeHHOuil8O7aJssXn2663nR1Bfkw=="}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/reactlogo-load/MAL-2026-16069.json"}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/reactlogo-load/v/1.0.0"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-8wjj-jqj4-3p7j"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-019836","import_time":"2026-09-09T04:21:44.902097712Z","modified_time":"2026-09-09T04:04:10Z","sha256":"a0f9d76fcf9f229c0a11508004a2be764133c6195530c4d56563eb28c358ab5f","source":"amazon-inspector","versions":["1.0.0"]},{"id":"GHSA-8wjj-jqj4-3p7j","import_time":"2026-11-11T16:18:54.763099796Z","modified_time":"2026-11-11T16:05:26Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"b601f039e88a447643c767a9b373a4c29abccb87e1bbfa2ab82e3d8c767b5d56","source":"ghsa-malware"}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]} \ No newline at end of file diff --git a/data/npm/MAL-2026-16390.json b/data/npm/MAL-2026-16390.json index 414fd10626..3bd2a17782 100644 --- a/data/npm/MAL-2026-16390.json +++ b/data/npm/MAL-2026-16390.json @@ -1 +1 @@ -{"schema_version":"1.9.0","id":"MAL-2026-16390","published":"2026-09-22T18:08:06Z","modified":"2026-09-22T18:45:07.016931857Z","summary":"Malicious code in oracle-redis (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (c800d0651330b1c1cd5d9c5cb2b6966eecefb2d2c28949d0670f485d820db3a6)\nThe package publishes as `oracle-redis` but ships a verbatim copy of the ioredis README, source tree, and repository URL (`git://github.com/luin/ioredis.git`), presenting itself as ioredis under a different name. The `package.json` declares two additional runtime dependencies that are not part of ioredis's real dependency set and are never imported anywhere in the shipped `built/` source: `redis-type-intel` ^1.10.5 and `pino-ulid` ^2.12.2. Because they are ordinary `dependencies` with caret ranges, `npm install oracle-redis` resolves and installs those two packages (and their transitive graph) into the installer's `node_modules`, executing whatever lifecycle scripts they declare, even though nothing in the ioredis code being wrapped ever loads them. The combination of a name-squat lure over a popular library plus unused, caret-pinned extra dependencies is a dependency-delivery shape: the harm, if any, arrives through the transitive install of the extra names rather than through this tarball's own code.\n","affected":[{"package":{"name":"oracle-redis","ecosystem":"npm","purl":"pkg:npm/oracle-redis"},"versions":["5.11.3"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"package.json","sha256":"e5f763b250baaea3fed9e4d692825e9864526b8ef614339045f47fff50fb3083","tlsh":"da61ff20dd9a9d732ac441f9e8b502819525c40b2e50fc0db3f953ad4f9e6bf31b9a2d"}],"package_integrity":[{"filename":"oracle-redis-5.11.3.tgz","hashes":{"sha1":"81f13d4426d451a25d109ce4833ea809c375523a","sha512_sri":"sha512-4aapEwKGeVugfaSVZW7NQOo36rcIRa+9Tc6EjHtejGyJeHVWOeDaXHgp0WF9NdwqIVI4SiswiRUi3wEy0yCaDQ=="}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/oracle-redis/MAL-2026-16390.json"}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/oracle-redis/v/5.11.3"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-020298","import_time":"2026-09-22T18:23:45.268002209Z","modified_time":"2026-09-22T18:08:06Z","sha256":"c800d0651330b1c1cd5d9c5cb2b6966eecefb2d2c28949d0670f485d820db3a6","source":"amazon-inspector","versions":["5.11.3"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]} \ No newline at end of file +{"schema_version":"1.9.2","id":"MAL-2026-16390","published":"2026-09-22T18:08:06Z","modified":"2026-11-11T16:31:27.240504300Z","aliases":["GHSA-h224-x97c-j5g7"],"summary":"Malicious code in oracle-redis (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (c800d0651330b1c1cd5d9c5cb2b6966eecefb2d2c28949d0670f485d820db3a6)\nThe package publishes as `oracle-redis` but ships a verbatim copy of the ioredis README, source tree, and repository URL (`git://github.com/luin/ioredis.git`), presenting itself as ioredis under a different name. The `package.json` declares two additional runtime dependencies that are not part of ioredis's real dependency set and are never imported anywhere in the shipped `built/` source: `redis-type-intel` ^1.10.5 and `pino-ulid` ^2.12.2. Because they are ordinary `dependencies` with caret ranges, `npm install oracle-redis` resolves and installs those two packages (and their transitive graph) into the installer's `node_modules`, executing whatever lifecycle scripts they declare, even though nothing in the ioredis code being wrapped ever loads them. The combination of a name-squat lure over a popular library plus unused, caret-pinned extra dependencies is a dependency-delivery shape: the harm, if any, arrives through the transitive install of the extra names rather than through this tarball's own code.\n\n## Source: ghsa-malware (e9f5baf0796d59298424c73abf874e64aaaf8f447d51fbf147c2327b667847fa)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"oracle-redis","ecosystem":"npm","purl":"pkg:npm/oracle-redis"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"versions":["5.11.3"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"path":"package.json","sha256":"e5f763b250baaea3fed9e4d692825e9864526b8ef614339045f47fff50fb3083","tlsh":"da61ff20dd9a9d732ac441f9e8b502819525c40b2e50fc0db3f953ad4f9e6bf31b9a2d"}],"package_integrity":[{"filename":"oracle-redis-5.11.3.tgz","hashes":{"sha1":"81f13d4426d451a25d109ce4833ea809c375523a","sha512_sri":"sha512-4aapEwKGeVugfaSVZW7NQOo36rcIRa+9Tc6EjHtejGyJeHVWOeDaXHgp0WF9NdwqIVI4SiswiRUi3wEy0yCaDQ=="}}]},"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/oracle-redis/MAL-2026-16390.json"}}],"references":[{"type":"PACKAGE","url":"https://www.npmjs.com/package/oracle-redis/v/5.11.3"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-h224-x97c-j5g7"}],"database_specific":{"malicious-packages-origins":[{"id":"IN-MAL-2026-020298","import_time":"2026-09-22T18:23:45.268002209Z","modified_time":"2026-09-22T18:08:06Z","sha256":"c800d0651330b1c1cd5d9c5cb2b6966eecefb2d2c28949d0670f485d820db3a6","source":"amazon-inspector","versions":["5.11.3"]},{"id":"GHSA-h224-x97c-j5g7","import_time":"2026-11-11T16:18:54.768278793Z","modified_time":"2026-11-11T15:46:47Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"e9f5baf0796d59298424c73abf874e64aaaf8f447d51fbf147c2327b667847fa","source":"ghsa-malware"}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"}]} \ No newline at end of file diff --git a/data/npm/MAL-2026-19117.json b/data/npm/MAL-2026-19117.json new file mode 100644 index 0000000000..0b4a1a7f8a --- /dev/null +++ b/data/npm/MAL-2026-19117.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19117","published":"2026-11-11T10:28:56Z","modified":"2026-11-11T17:42:05.733159345Z","aliases":["GHSA-qpc3-24mv-6qrp"],"summary":"Malicious code in xsdsh-purge-next (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (b0e622ecd67d042449c9c412990c54fdff64eee5df796a6f33ddf3ea46c8d681)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"xsdsh-purge-next","ecosystem":"npm","purl":"pkg:npm/xsdsh-purge-next"},"versions":["1.0.0"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/xsdsh-purge-next/MAL-2026-19117.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-qpc3-24mv-6qrp"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-qpc3-24mv-6qrp","import_time":"2026-11-11T11:17:25.735427867Z","modified_time":"2026-11-11T10:28:56Z","sha256":"b0e622ecd67d042449c9c412990c54fdff64eee5df796a6f33ddf3ea46c8d681","source":"ghsa-malware","versions":["1.0.0"]}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19118.json b/data/npm/MAL-2026-19118.json index 652278ef17..d8fb8b1e6f 100644 --- a/data/npm/MAL-2026-19118.json +++ b/data/npm/MAL-2026-19118.json @@ -1 +1 @@ -{"schema_version":"1.9.2","id":"MAL-2026-19118","published":"2026-11-11T12:09:02Z","modified":"2026-11-11T12:30:04.004300065Z","aliases":["GHSA-9j97-6pqr-qvrx"],"summary":"Malicious code in 0sec-cli (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (6ca0694213fab27d0292d43aee954b81c13e551a81563903fb9afd7e54a9dda2)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"0sec-cli","ecosystem":"npm","purl":"pkg:npm/0sec-cli"},"versions":["0.28.10"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/0sec-cli/MAL-2026-19118.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-9j97-6pqr-qvrx"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-9j97-6pqr-qvrx","import_time":"2026-11-11T12:23:59.195275939Z","modified_time":"2026-11-11T12:09:02Z","sha256":"6ca0694213fab27d0292d43aee954b81c13e551a81563903fb9afd7e54a9dda2","source":"ghsa-malware","versions":["0.28.10"]}]}} \ No newline at end of file +{"schema_version":"1.9.2","id":"MAL-2026-19118","published":"2026-11-11T12:09:02Z","modified":"2026-11-11T15:30:05.177728839Z","aliases":["GHSA-9j97-6pqr-qvrx"],"summary":"Malicious code in 0sec-cli (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (6ca0694213fab27d0292d43aee954b81c13e551a81563903fb9afd7e54a9dda2)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"0sec-cli","ecosystem":"npm","purl":"pkg:npm/0sec-cli"},"versions":["0.28.10","0.28.9"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"},{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/0sec-cli/MAL-2026-19118.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-9j97-6pqr-qvrx"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-9j97-6pqr-qvrx","import_time":"2026-11-11T12:23:59.195275939Z","modified_time":"2026-11-11T12:09:02Z","sha256":"6ca0694213fab27d0292d43aee954b81c13e551a81563903fb9afd7e54a9dda2","source":"ghsa-malware","versions":["0.28.10"]},{"id":"GHSA-9j97-6pqr-qvrx","import_time":"2026-11-11T15:16:49.600626562Z","modified_time":"2026-11-11T14:53:13Z","sha256":"3c30d9423f714d9676d95618695bba34bd3a5f438a675f388502a9697790ec0b","source":"ghsa-malware","versions":["0.28.9","0.28.10"]}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19119.json b/data/npm/MAL-2026-19119.json new file mode 100644 index 0000000000..1ab3b93ccd --- /dev/null +++ b/data/npm/MAL-2026-19119.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19119","published":"2026-11-11T14:35:24Z","modified":"2026-11-11T15:30:05.167073728Z","aliases":["GHSA-5xh5-qp4j-xjfx"],"summary":"Malicious code in cal-time-stamper (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (72abd3a6cebf27a3e1f35df7ec7d603d5df43879a6b528927d6fb331fa3d8906)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"cal-time-stamper","ecosystem":"npm","purl":"pkg:npm/cal-time-stamper"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/cal-time-stamper/MAL-2026-19119.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-5xh5-qp4j-xjfx"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-5xh5-qp4j-xjfx","import_time":"2026-11-11T15:16:49.592209215Z","modified_time":"2026-11-11T14:35:24Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"72abd3a6cebf27a3e1f35df7ec7d603d5df43879a6b528927d6fb331fa3d8906","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19120.json b/data/npm/MAL-2026-19120.json new file mode 100644 index 0000000000..0e5fe14913 --- /dev/null +++ b/data/npm/MAL-2026-19120.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19120","published":"2026-11-11T14:35:24Z","modified":"2026-11-11T15:30:05.162451116Z","aliases":["GHSA-fvf5-h3m3-g793"],"summary":"Malicious code in correct-calc (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (5acdc2d413c5631f3fd8c1ce4442e9aaa50f794cd0359ac1cb8be9bbd55a5900)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"correct-calc","ecosystem":"npm","purl":"pkg:npm/correct-calc"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/correct-calc/MAL-2026-19120.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-fvf5-h3m3-g793"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-fvf5-h3m3-g793","import_time":"2026-11-11T15:16:49.604798748Z","modified_time":"2026-11-11T14:35:25Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"5acdc2d413c5631f3fd8c1ce4442e9aaa50f794cd0359ac1cb8be9bbd55a5900","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19121.json b/data/npm/MAL-2026-19121.json new file mode 100644 index 0000000000..10c90cfb1e --- /dev/null +++ b/data/npm/MAL-2026-19121.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19121","published":"2026-11-11T15:35:43Z","modified":"2026-11-11T16:31:41.533735799Z","aliases":["GHSA-jgmp-2vff-26jw"],"summary":"Malicious code in @tomhundley/condux (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (918d68d8e3d49a96a57f16c1777c683f90a0db5d0d3981de1a75104640f987fb)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"@tomhundley/condux","ecosystem":"npm","purl":"pkg:npm/%40tomhundley/condux"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@tomhundley/condux/MAL-2026-19121.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-jgmp-2vff-26jw"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-jgmp-2vff-26jw","import_time":"2026-11-11T16:18:54.769776055Z","modified_time":"2026-11-11T15:35:44Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"918d68d8e3d49a96a57f16c1777c683f90a0db5d0d3981de1a75104640f987fb","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19122.json b/data/npm/MAL-2026-19122.json new file mode 100644 index 0000000000..30de190a2a --- /dev/null +++ b/data/npm/MAL-2026-19122.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19122","published":"2026-11-11T15:35:44Z","modified":"2026-11-11T16:30:44.598485644Z","aliases":["GHSA-65fw-m4q2-8ffh"],"summary":"Malicious code in @tomhundley/grafene (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (5013b2a9104c46960df3cf911ba95230dc32cec7c011ac529ba524140263da85)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"@tomhundley/grafene","ecosystem":"npm","purl":"pkg:npm/%40tomhundley/grafene"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@tomhundley/grafene/MAL-2026-19122.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-65fw-m4q2-8ffh"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-65fw-m4q2-8ffh","import_time":"2026-11-11T16:18:54.755360722Z","modified_time":"2026-11-11T15:35:44Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"5013b2a9104c46960df3cf911ba95230dc32cec7c011ac529ba524140263da85","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19123.json b/data/npm/MAL-2026-19123.json new file mode 100644 index 0000000000..aa49d9ee0b --- /dev/null +++ b/data/npm/MAL-2026-19123.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19123","published":"2026-11-11T15:35:43Z","modified":"2026-11-11T16:30:46.352814730Z","aliases":["GHSA-gfh2-8j8w-933m"],"summary":"Malicious code in @tomhundley/mypackagetest (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (b54b162f0472b53354df190589cad77147e313297b09e74a1280f6d8e9f4eaf5)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"@tomhundley/mypackagetest","ecosystem":"npm","purl":"pkg:npm/%40tomhundley/mypackagetest"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@tomhundley/mypackagetest/MAL-2026-19123.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-gfh2-8j8w-933m"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-gfh2-8j8w-933m","import_time":"2026-11-11T16:18:54.766887915Z","modified_time":"2026-11-11T15:35:44Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"b54b162f0472b53354df190589cad77147e313297b09e74a1280f6d8e9f4eaf5","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19124.json b/data/npm/MAL-2026-19124.json new file mode 100644 index 0000000000..ee4170e5c6 --- /dev/null +++ b/data/npm/MAL-2026-19124.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19124","published":"2026-11-11T15:35:44Z","modified":"2026-11-11T16:30:46.352914121Z","aliases":["GHSA-qrxr-h27x-m353"],"summary":"Malicious code in @tomhundley/prismdb (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (e1a64a795f64a9eb3b4c77fb6a4dc6ce3b10f089f6e67588a6c3b90fe0f22d4e)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"@tomhundley/prismdb","ecosystem":"npm","purl":"pkg:npm/%40tomhundley/prismdb"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@tomhundley/prismdb/MAL-2026-19124.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-qrxr-h27x-m353"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-qrxr-h27x-m353","import_time":"2026-11-11T16:18:54.780969325Z","modified_time":"2026-11-11T15:35:49Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"e1a64a795f64a9eb3b4c77fb6a4dc6ce3b10f089f6e67588a6c3b90fe0f22d4e","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19125.json b/data/npm/MAL-2026-19125.json new file mode 100644 index 0000000000..6a3fb88229 --- /dev/null +++ b/data/npm/MAL-2026-19125.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19125","published":"2026-11-11T15:35:43Z","modified":"2026-11-11T16:30:44.448263689Z","aliases":["GHSA-gpvw-6mq7-2h5w"],"summary":"Malicious code in @tomhundley/sparkdash (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (b2f704f9e809f18566ad6778d26de8eeab8342a3e3bf4f7d1fd9ceb13ef1e976)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"@tomhundley/sparkdash","ecosystem":"npm","purl":"pkg:npm/%40tomhundley/sparkdash"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/@tomhundley/sparkdash/MAL-2026-19125.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-gpvw-6mq7-2h5w"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-gpvw-6mq7-2h5w","import_time":"2026-11-11T16:18:54.767548057Z","modified_time":"2026-11-11T15:35:49Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"b2f704f9e809f18566ad6778d26de8eeab8342a3e3bf4f7d1fd9ceb13ef1e976","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19126.json b/data/npm/MAL-2026-19126.json new file mode 100644 index 0000000000..a0768ace00 --- /dev/null +++ b/data/npm/MAL-2026-19126.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19126","published":"2026-11-11T16:05:18Z","modified":"2026-11-11T16:30:44.596825885Z","aliases":["GHSA-24hp-9mx5-pqw7"],"summary":"Malicious code in aurelia-type (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (106679389edb6c05dcc60304b59b38fceec0641007040ef9a2bc500343a70d37)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"aurelia-type","ecosystem":"npm","purl":"pkg:npm/aurelia-type"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/aurelia-type/MAL-2026-19126.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-24hp-9mx5-pqw7"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-24hp-9mx5-pqw7","import_time":"2026-11-11T16:18:54.719401757Z","modified_time":"2026-11-11T16:05:19Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"106679389edb6c05dcc60304b59b38fceec0641007040ef9a2bc500343a70d37","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19127.json b/data/npm/MAL-2026-19127.json new file mode 100644 index 0000000000..bb6b01203d --- /dev/null +++ b/data/npm/MAL-2026-19127.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19127","published":"2026-11-11T16:07:39Z","modified":"2026-11-11T16:30:44.601895194Z","aliases":["GHSA-qf7m-g96r-q7gq"],"summary":"Malicious code in chai-as-spy (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (64787b67d3c768f20c6657a4c4e0c11ede154d898d62e4b1bafc4028f3fbe4c8)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"chai-as-spy","ecosystem":"npm","purl":"pkg:npm/chai-as-spy"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/chai-as-spy/MAL-2026-19127.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-qf7m-g96r-q7gq"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-qf7m-g96r-q7gq","import_time":"2026-11-11T16:18:54.778918313Z","modified_time":"2026-11-11T16:07:47Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"64787b67d3c768f20c6657a4c4e0c11ede154d898d62e4b1bafc4028f3fbe4c8","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19128.json b/data/npm/MAL-2026-19128.json new file mode 100644 index 0000000000..b8fef48680 --- /dev/null +++ b/data/npm/MAL-2026-19128.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19128","published":"2026-11-11T15:35:44Z","modified":"2026-11-11T16:31:43.241943233Z","aliases":["GHSA-8mrh-r693-wrfq"],"summary":"Malicious code in cronbits (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (b3197e96ef6ef9b4f31f6011f346c4732315fec513da72240d8ec4c4af469b0c)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"cronbits","ecosystem":"npm","purl":"pkg:npm/cronbits"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/cronbits/MAL-2026-19128.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-8mrh-r693-wrfq"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-8mrh-r693-wrfq","import_time":"2026-11-11T16:18:54.762312342Z","modified_time":"2026-11-11T15:35:49Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"b3197e96ef6ef9b4f31f6011f346c4732315fec513da72240d8ec4c4af469b0c","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19129.json b/data/npm/MAL-2026-19129.json new file mode 100644 index 0000000000..051f45bade --- /dev/null +++ b/data/npm/MAL-2026-19129.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19129","published":"2026-11-11T15:35:44Z","modified":"2026-11-11T16:31:43.637266819Z","aliases":["GHSA-78j2-8cm9-6g34"],"summary":"Malicious code in csvbits (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (c2fcb242f6ee5ce5ee0d16ae2a7bb5374d17eb9f9e983883e92e6922145493bd)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"csvbits","ecosystem":"npm","purl":"pkg:npm/csvbits"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/csvbits/MAL-2026-19129.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-78j2-8cm9-6g34"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-78j2-8cm9-6g34","import_time":"2026-11-11T16:18:54.760576265Z","modified_time":"2026-11-11T15:35:49Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"c2fcb242f6ee5ce5ee0d16ae2a7bb5374d17eb9f9e983883e92e6922145493bd","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19130.json b/data/npm/MAL-2026-19130.json new file mode 100644 index 0000000000..5713be99c8 --- /dev/null +++ b/data/npm/MAL-2026-19130.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19130","published":"2026-11-11T16:03:42Z","modified":"2026-11-11T16:31:43.992854668Z","aliases":["GHSA-w7c4-444m-w3r7"],"summary":"Malicious code in express-helmet (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (01bc081b6433428f25c1ff2487ec9261e9a9bc0de174be268431d7c3339e60eb)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"express-helmet","ecosystem":"npm","purl":"pkg:npm/express-helmet"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/express-helmet/MAL-2026-19130.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-w7c4-444m-w3r7"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-w7c4-444m-w3r7","import_time":"2026-11-11T16:18:54.7855679Z","modified_time":"2026-11-11T16:03:42Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"01bc081b6433428f25c1ff2487ec9261e9a9bc0de174be268431d7c3339e60eb","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19131.json b/data/npm/MAL-2026-19131.json new file mode 100644 index 0000000000..0e3af8ac5c --- /dev/null +++ b/data/npm/MAL-2026-19131.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19131","published":"2026-11-11T15:35:44Z","modified":"2026-11-11T16:31:43.743285204Z","aliases":["GHSA-q97r-6qp3-r59x"],"summary":"Malicious code in flowbits (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (c1c2953a6c580e0482ccc6d86f9ec4cec505800bdf3e2556a7d8584d604e1cde)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"flowbits","ecosystem":"npm","purl":"pkg:npm/flowbits"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/flowbits/MAL-2026-19131.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-q97r-6qp3-r59x"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-q97r-6qp3-r59x","import_time":"2026-11-11T16:18:54.777127596Z","modified_time":"2026-11-11T15:35:50Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"c1c2953a6c580e0482ccc6d86f9ec4cec505800bdf3e2556a7d8584d604e1cde","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19132.json b/data/npm/MAL-2026-19132.json new file mode 100644 index 0000000000..58fe9ad7de --- /dev/null +++ b/data/npm/MAL-2026-19132.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19132","published":"2026-11-11T16:07:39Z","modified":"2026-11-11T16:32:17.847809761Z","aliases":["GHSA-x5mj-4fp8-3fg8"],"summary":"Malicious code in gloglet (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (27917e66263c4e6087c4b2cbbdc4fb8e8d6b13da3b40209da2a2ab99f4fa096f)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"gloglet","ecosystem":"npm","purl":"pkg:npm/gloglet"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/gloglet/MAL-2026-19132.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-x5mj-4fp8-3fg8"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-x5mj-4fp8-3fg8","import_time":"2026-11-11T16:18:54.787265216Z","modified_time":"2026-11-11T16:07:47Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"27917e66263c4e6087c4b2cbbdc4fb8e8d6b13da3b40209da2a2ab99f4fa096f","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19133.json b/data/npm/MAL-2026-19133.json new file mode 100644 index 0000000000..a7976598ae --- /dev/null +++ b/data/npm/MAL-2026-19133.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19133","published":"2026-11-11T16:03:42Z","modified":"2026-11-11T16:31:43.238038166Z","aliases":["GHSA-6hfj-gc9f-mprr"],"summary":"Malicious code in helmify (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (bbe77795db05a220f8f66f7fa5d0d7570323b9e86839bf073254cf49de206c31)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"helmify","ecosystem":"npm","purl":"pkg:npm/helmify"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/helmify/MAL-2026-19133.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-6hfj-gc9f-mprr"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-6hfj-gc9f-mprr","import_time":"2026-11-11T16:18:54.756930624Z","modified_time":"2026-11-11T16:03:43Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"bbe77795db05a220f8f66f7fa5d0d7570323b9e86839bf073254cf49de206c31","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19134.json b/data/npm/MAL-2026-19134.json new file mode 100644 index 0000000000..25865bedb5 --- /dev/null +++ b/data/npm/MAL-2026-19134.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19134","published":"2026-11-11T15:43:40Z","modified":"2026-11-11T16:31:43.988854341Z","aliases":["GHSA-66fx-r7cm-jxv6"],"summary":"Malicious code in ioredis-om-typed (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (4ae4f7bdb64662971c5c06f815a43ea6e39c4a5858278af4e938e0739054f385)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"ioredis-om-typed","ecosystem":"npm","purl":"pkg:npm/ioredis-om-typed"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/ioredis-om-typed/MAL-2026-19134.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-66fx-r7cm-jxv6"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-66fx-r7cm-jxv6","import_time":"2026-11-11T16:18:54.756161065Z","modified_time":"2026-11-11T15:43:41Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"4ae4f7bdb64662971c5c06f815a43ea6e39c4a5858278af4e938e0739054f385","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19135.json b/data/npm/MAL-2026-19135.json new file mode 100644 index 0000000000..2cd84fdc6e --- /dev/null +++ b/data/npm/MAL-2026-19135.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19135","published":"2026-11-11T15:50:31Z","modified":"2026-11-11T16:31:43.738073898Z","aliases":["GHSA-5r2x-xv5p-58vg"],"summary":"Malicious code in ioredis-xyz (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (cae0a51364aaaf86a79b43a41760c31b2141b7e4c412b8b290ec41a888f3f0db)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"ioredis-xyz","ecosystem":"npm","purl":"pkg:npm/ioredis-xyz"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/ioredis-xyz/MAL-2026-19135.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-5r2x-xv5p-58vg"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-5r2x-xv5p-58vg","import_time":"2026-11-11T16:18:54.753972338Z","modified_time":"2026-11-11T15:50:32Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"cae0a51364aaaf86a79b43a41760c31b2141b7e4c412b8b290ec41a888f3f0db","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19136.json b/data/npm/MAL-2026-19136.json new file mode 100644 index 0000000000..d22e7a7690 --- /dev/null +++ b/data/npm/MAL-2026-19136.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19136","published":"2026-11-11T15:35:44Z","modified":"2026-11-11T16:31:43.644603222Z","aliases":["GHSA-qv92-rmvf-gfmp"],"summary":"Malicious code in jsonrail (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (6cbf40768a5bf5e46a71d80aff2bb57827f0eef07ada07542c358c347b5936c6)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"jsonrail","ecosystem":"npm","purl":"pkg:npm/jsonrail"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/jsonrail/MAL-2026-19136.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-qv92-rmvf-gfmp"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-qv92-rmvf-gfmp","import_time":"2026-11-11T16:18:54.78228921Z","modified_time":"2026-11-11T15:35:49Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"6cbf40768a5bf5e46a71d80aff2bb57827f0eef07ada07542c358c347b5936c6","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19137.json b/data/npm/MAL-2026-19137.json new file mode 100644 index 0000000000..81c06e3913 --- /dev/null +++ b/data/npm/MAL-2026-19137.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19137","published":"2026-11-11T15:35:44Z","modified":"2026-11-11T16:31:01.961743936Z","aliases":["GHSA-q9jm-97m9-6pw6"],"summary":"Malicious code in pathbits (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (a0829ff8923d3c848ba67ae064741353290ff7cc3f984a189b0fe0385eb998d8)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"pathbits","ecosystem":"npm","purl":"pkg:npm/pathbits"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/pathbits/MAL-2026-19137.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-q9jm-97m9-6pw6"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-q9jm-97m9-6pw6","import_time":"2026-11-11T16:18:54.77804647Z","modified_time":"2026-11-11T15:35:49Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"a0829ff8923d3c848ba67ae064741353290ff7cc3f984a189b0fe0385eb998d8","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19138.json b/data/npm/MAL-2026-19138.json new file mode 100644 index 0000000000..3581635107 --- /dev/null +++ b/data/npm/MAL-2026-19138.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19138","published":"2026-11-11T16:03:42Z","modified":"2026-11-11T16:31:27.109706813Z","aliases":["GHSA-qpr9-cqf6-8m73"],"summary":"Malicious code in shraps (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (a490ee21191da673502cf8d36ab2a9011a3ed8c35fb5b5e7b563286643d6a9a1)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"shraps","ecosystem":"npm","purl":"pkg:npm/shraps"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/shraps/MAL-2026-19138.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-qpr9-cqf6-8m73"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-qpr9-cqf6-8m73","import_time":"2026-11-11T16:18:54.780188471Z","modified_time":"2026-11-11T16:03:42Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"a490ee21191da673502cf8d36ab2a9011a3ed8c35fb5b5e7b563286643d6a9a1","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19139.json b/data/npm/MAL-2026-19139.json new file mode 100644 index 0000000000..e2df2f2dbb --- /dev/null +++ b/data/npm/MAL-2026-19139.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19139","published":"2026-11-11T15:35:44Z","modified":"2026-11-11T16:31:45.964502337Z","aliases":["GHSA-73wm-q362-6xp2"],"summary":"Malicious code in taskpace (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (226b1ba3278805224b89b5ffee4e5cfa5de00214b8954baa87e7c89bba1e8176)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"taskpace","ecosystem":"npm","purl":"pkg:npm/taskpace"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/taskpace/MAL-2026-19139.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-73wm-q362-6xp2"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-73wm-q362-6xp2","import_time":"2026-11-11T16:18:54.759788793Z","modified_time":"2026-11-11T15:35:49Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"226b1ba3278805224b89b5ffee4e5cfa5de00214b8954baa87e7c89bba1e8176","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19140.json b/data/npm/MAL-2026-19140.json new file mode 100644 index 0000000000..a7cf88e9cd --- /dev/null +++ b/data/npm/MAL-2026-19140.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19140","published":"2026-11-11T15:35:44Z","modified":"2026-11-11T16:31:02.153596510Z","aliases":["GHSA-9mgw-vxc3-g2x8"],"summary":"Malicious code in textmark-engine (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (57d447410e77ecbc8e565ce77c7204640f06bfc937cce80b99cfa43d185adcb8)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"textmark-engine","ecosystem":"npm","purl":"pkg:npm/textmark-engine"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/textmark-engine/MAL-2026-19140.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-9mgw-vxc3-g2x8"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-9mgw-vxc3-g2x8","import_time":"2026-11-11T16:18:54.764325789Z","modified_time":"2026-11-11T15:35:50Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"57d447410e77ecbc8e565ce77c7204640f06bfc937cce80b99cfa43d185adcb8","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/data/npm/MAL-2026-19141.json b/data/npm/MAL-2026-19141.json new file mode 100644 index 0000000000..a7b4c47a01 --- /dev/null +++ b/data/npm/MAL-2026-19141.json @@ -0,0 +1 @@ +{"schema_version":"1.9.2","id":"MAL-2026-19141","published":"2026-11-11T16:07:39Z","modified":"2026-11-11T16:31:46.065845769Z","aliases":["GHSA-m9gg-gx4w-v468"],"summary":"Malicious code in verboset (npm)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: ghsa-malware (3a4093160dce8a65fe5ce463e8e166bbd21daf3f04a5d722a9133efb78a5d257)\nAny computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outside entity, there is no guarantee that removing the package will remove all malicious software resulting from installing it.\n","affected":[{"package":{"name":"verboset","ecosystem":"npm","purl":"pkg:npm/verboset"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"source":"https://github.com/ossf/malicious-packages/blob/main/osv/malicious/npm/verboset/MAL-2026-19141.json"}}],"references":[{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-m9gg-gx4w-v468"}],"database_specific":{"malicious-packages-origins":[{"id":"GHSA-m9gg-gx4w-v468","import_time":"2026-11-11T16:18:54.770623298Z","modified_time":"2026-11-11T16:07:40Z","ranges":[{"events":[{"introduced":"0"}],"type":"SEMVER"}],"sha256":"3a4093160dce8a65fe5ce463e8e166bbd21daf3f04a5d722a9133efb78a5d257","source":"ghsa-malware"}]}} \ No newline at end of file diff --git a/state/sync.json b/state/sync.json index f1047b149d..ce0a421d42 100644 --- a/state/sync.json +++ b/state/sync.json @@ -25,10 +25,10 @@ "records": 2010 }, "OSS-Fuzz": { - "etag": "\"121d45b88a3a072c5385693bbdaef2e4\"", - "last_modified": "Tue, 10 Nov 2026 17:48:45 GMT", - "last_success": "2026-11-10T20:34:59.745211+00:00", - "records": 4290 + "etag": "\"6becd549ff0c3e8881d6c196a7310eaa\"", + "last_modified": "Wed, 11 Nov 2026 17:33:11 GMT", + "last_success": "2026-11-11T18:46:24.391220+00:00", + "records": 4291 }, "Packagist": { "etag": "\"33cd85e43eaaa872adb7d5a2a05ea651\"", @@ -55,10 +55,10 @@ "records": 3093 }, "npm": { - "etag": "\"ae5e057b4685c9a089e5afd2e3a83f19\"", - "last_modified": "Wed, 11 Nov 2026 12:32:53 GMT", - "last_success": "2026-11-11T12:50:33.290104+00:00", - "records": 231666 + "etag": "\"6b79d1e35f8137dd20011bab0947794e\"", + "last_modified": "Wed, 11 Nov 2026 17:48:14 GMT", + "last_success": "2026-11-11T18:46:17.881918+00:00", + "records": 231690 } }, "version": 1