Priority LOW 33
An issue was discovered in Open Design Alliance Drawings SDK before 2024.12.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00192 · Published 2023-12-26 · Fixed in 2024.12 CWE-787
Priority LOW 36
An issue was discovered in Open Design Alliance Drawings SDK before 2024.10.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00273 · Published 2023-11-07 · Fixed in 2024.10 CWE-125
Priority LOW 35
A heap-based buffer overflow exists in the DXF file reading procedure in Open Design Alliance Drawings SDK before 2023.6.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00216 · Published 2023-04-15 · No fix listed CWE-787
Priority LOW 36
Parsing of DWG files in Open Design Alliance Drawings SDK before 2023.6 lacks proper validation of the length of user-supplied XRecord data prior to copying it to a fixed-length heap-based buffer.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00315 · Published 2023-04-15 · No fix listed CWE-787
Priority LOW 36
An issue was discovered in Open Design Alliance Drawings SDK before 2024.1.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0044 · Published 2023-04-10 · No fix listed CWE-416
Priority LOW 34
An issue was discovered in Open Design Alliance Drawings SDK before 2023.3.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00397 · Published 2022-07-17 · No fix listed CWE-306
Priority LOW 34
An issue was discovered in Open Design Alliance Drawings SDK before 2023.3.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00419 · Published 2022-07-17 · No fix listed CWE-125
Priority LOW 34
An issue was discovered in Open Design Alliance Drawings SDK before 2023.2.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00419 · Published 2022-07-17 · No fix listed CWE-125
Priority LOW 38
Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01127 · Published 2022-01-15 · No fix listed CWE-787
Priority LOW 36
An out-of-bounds read vulnerability exists when reading a TGA file using Open Design Alliance Drawings SDK before 2022.12.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00844 · Published 2021-12-21 · No fix listed CWE-125
Priority LOW 36
An out-of-bounds read vulnerability exists when reading a TIF file using Open Design Alliance Drawings SDK before 2022.12.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00844 · Published 2021-12-21 · No fix listed CWE-125
Priority LOW 36
An out-of-bounds read vulnerability exists when reading a BMP file using Open Design Alliance (ODA) Drawings Explorer before 2022.12.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0084 · Published 2021-12-21 · No fix listed CWE-125
Priority LOW 36
An Improper Input Validation Vulnerability exists when reading a BMP file using Open Design Alliance Drawings SDK before 2022.12.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00897 · Published 2021-12-21 · No fix listed CWE-20
Priority LOW 36
An out-of-bounds write vulnerability exists when reading a TIF file using Open Design Alliance (ODA) Drawings Explorer before 2022.11.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0084 · Published 2021-12-05 · No fix listed CWE-787
Priority LOW 36
A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.11.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00884 · Published 2021-12-05 · No fix listed CWE-416
Priority LOW 36
An out-of-bounds write vulnerability exists when reading U3D files in Open Design Alliance PRC SDK before 2022.11.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0084 · Published 2021-12-05 · No fix listed CWE-787
Priority LOW 36
An out-of-bounds write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0084 · Published 2021-12-05 · No fix listed CWE-787
Priority LOW 36
An out-of-bounds write vulnerability exists when reading a JPG file using Open Design Alliance Drawings SDK before 2022.11.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0084 · Published 2021-12-05 · No fix listed CWE-787
Priority LOW 37
A Use-After-Free Remote Vulnerability exists when reading a DWG file using Open Design Alliance Drawings SDK before 2022.11.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01383 · Published 2021-11-22 · No fix listed CWE-416
Priority MEDIUM 41
An Out-of-Bounds Read vulnerability exists when reading a U3D file using Open Design Alliance PRC SDK before 2022.11.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01241 · Published 2021-11-22 · No fix listed CWE-125
Priority MEDIUM 48
An improper handling of exceptional conditions vulnerability exists in Open Design Alliance ODA Viewer sample before 2022.11.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03632 · Published 2021-11-14 · No fix listed CWE-755
Priority LOW 38
A stack-based buffer overflow vulnerability exists in the DWF file reading procedure in Open Design Alliance Drawings SDK before 2022.8.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01897 · Published 2021-11-14 · No fix listed CWE-787
Priority LOW 37
An Out-of-Bounds Write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01695 · Published 2021-11-14 · No fix listed CWE-787
Priority LOW 37
An out-of-bounds write vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01336 · Published 2021-11-14 · No fix listed CWE-787
Priority LOW 36
An Out-of-bounds Read vulnerability exists in the OBJ file reading procedure in Open Design Alliance Drawings SDK before 2022.11.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0084 · Published 2021-11-14 · No fix listed CWE-125
Load more