Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

LibreDWG/libredwg

              master @ 7f46cfa
            

296

Fixes

CVEs

CRITICAL

Peak severity

20.7%

Coverage

Highlights

Buffer Overflow: 131 prior fixes. Scrutinize any change in this area.

src/decode.c: most-fixed (80 issues). Treat as high-risk during review.

248 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Buffer Overflow: Core bit-reading and string-conversion primitives lack consistent bounds checks, leading to OOB reads/writes across many callers.

Heap Buffer Overflow: R2004/R2007 decompression and section parsing repeatedly fail to validate sizes/offsets before memcpy/decompress, causing heap overflows.

Use-After-Free: Object-pool reallocation (dwg_add_*) leaves stale pointers that are dereferenced, causing use-after-free.