Records49All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high47CVSS 7.0–8.9
Exploited now
Opendesign records in CISA KEVNo Opendesign vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
13 records in Drawings Software Development Kit · all components
Priority MEDIUM 40
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0337 · Published 2021-01-18 · No fix listed CWE-787
Priority LOW 39
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02314 · Published 2021-01-18 · No fix listed CWE-843
Priority LOW 39
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02314 · Published 2021-01-18 · No fix listed CWE-476
Priority LOW 39
An issue was discovered in Open Design Alliance Drawings SDK before 2021.11.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02662 · Published 2021-01-18 · No fix listed CWE-704
Priority LOW 39
An issue was discovered in Open Design Alliance Drawings SDK before 2021.12.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02314 · Published 2021-01-18 · No fix listed CWE-770
Priority LOW 38
Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01127 · Published 2022-01-15 · No fix listed CWE-787
Priority LOW 38
A stack-based buffer overflow vulnerability exists in the DWF file reading procedure in Open Design Alliance Drawings SDK before 2022.8.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01897 · Published 2021-11-14 · No fix listed CWE-787
Priority LOW 38
An issue was discovered in Open Design Alliance Drawings SDK before 2021.12.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.02243 · Published 2021-01-18 · No fix listed CWE-787
Priority LOW 37
An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01681 · Published 2021-11-14 · No fix listed CWE-125
Priority LOW 37
An Out-of-Bounds Write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01695 · Published 2021-11-14 · No fix listed CWE-787
Priority LOW 37
An Out-of-Bounds Write vulnerability exists when reading a DXF or DWG file using Open Design Alliance Drawings SDK before 2022.11.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01695 · Published 2021-11-14 · No fix listed CWE-787
Priority LOW 36
A Use After Free vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.8.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00884 · Published 2021-11-14 · No fix listed CWE-416
Priority LOW 36
A Use After Free Vulnerability exists in the Open Design Alliance Drawings SDK before 2022.11.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00884 · Published 2021-11-14 · No fix listed CWE-416
Open these records in search →