{"id":"OSV-2023-1149","summary":"Heap-buffer-overflow in bit_read_fixed","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64118\n\n```\nCrash type: Heap-buffer-overflow READ 16\nCrash state:\nbit_read_fixed\nbit_read_TF\ndecode_preR13_sentinel\n```\n","modified":"2023-11-13T13:01:37.087873Z","published":"2023-11-13T13:01:37.087461Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64118"}],"affected":[{"package":{"name":"libredwg","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libredwg"},"ranges":[{"type":"GIT","repo":"https://github.com/LibreDWG/libredwg","events":[{"introduced":"524364b216354e5a4297861456f3811f3e697ead"},{"fixed":"774894c13e511318215a888eb483d76282a18ed1"}]}],"versions":["0.12.5.6313","0.12.5.6316","0.12.5.6319","0.12.5.6321","0.12.5.6325","0.12.5.6333","0.12.5.6342","0.12.5.6347","0.12.5.6350","0.12.5.6355","0.12.5.6357","0.12.5.6360","0.12.5.6362","0.12.5.6366","0.12.5.6369","0.12.5.6374","0.12.5.6377","0.12.5.6384","0.12.5.6388","0.12.5.6391","0.12.5.6394","0.12.5.6399","0.12.5.6402","0.12.5.6406","0.12.5.6417","0.12.5.6424","0.12.5.6430","0.12.5.6432","0.12.5.6434","0.12.5.6437","0.12.5.6439","0.12.5.6444","0.12.5.6456","0.12.5.6459","0.12.5.6461","0.12.5.6465","0.12.5.6468","0.12.5.6479","0.12.5.6483","0.12.5.6488","0.12.5.6493","0.12.5.6495","0.12.5.6501","0.12.5.6511","0.12.5.6513","0.12.5.6517","0.12.5.6527","0.12.5.6533","0.12.5.6534","0.12.5.6539","0.12.5.6543","0.12.5.6548","0.12.5.6550","0.12.5.6564","0.12.5.6573","0.12.5.6578","0.12.5.6582","0.12.5.6585"],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2023-1149.yaml"}}],"schema_version":"1.7.3"}