Opendesign vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2023-22670 A heap-based buffer overflow exists in the DXF file reading procedure in Open Design Alliance Drawings SDK before 2023.6.High 7.8 · Apr 14, 2023
• CVE-2023-22669 Parsing of DWG files in Open Design Alliance Drawings SDK before 2023.6 lacks proper validation of the length of user-supplied XRecord data prior to copying it High 7.8 · Apr 14, 2023
• CVE-2023-26495 An issue was discovered in Open Design Alliance Drawings SDK before 2024.1.High 7.8 · Apr 10, 2023
• CVE-2022-28809 An issue was discovered in Open Design Alliance Drawings SDK before 2023.3.High 7.8 · Jul 17, 2022
• CVE-2022-28808 An issue was discovered in Open Design Alliance Drawings SDK before 2023.3.High 7.8 · Jul 17, 2022
• CVE-2022-28807 An issue was discovered in Open Design Alliance Drawings SDK before 2023.2.High 7.8 · Jul 17, 2022
• CVE-2022-23095 Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files.High 7.8 · Jan 15, 2022
• CVE-2021-44860 An out-of-bounds read vulnerability exists when reading a TIF file using Open Design Alliance Drawings SDK before 2022.12.High 7.8 · Dec 21, 2021
• CVE-2021-44859 An out-of-bounds read vulnerability exists when reading a TGA file using Open Design Alliance Drawings SDK before 2022.12.High 7.8 · Dec 21, 2021
• CVE-2021-44423 An out-of-bounds read vulnerability exists when reading a BMP file using Open Design Alliance (ODA) Drawings Explorer before 2022.12.High 7.8 · Dec 21, 2021
• CVE-2021-44422 An Improper Input Validation Vulnerability exists when reading a BMP file using Open Design Alliance Drawings SDK before 2022.12.High 7.8 · Dec 21, 2021
• CVE-2021-44048 An out-of-bounds write vulnerability exists when reading a TIF file using Open Design Alliance (ODA) Drawings Explorer before 2022.11.High 7.8 · Dec 5, 2021
• CVE-2021-44047 A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.11.High 7.8 · Dec 5, 2021
• CVE-2021-44046 An out-of-bounds write vulnerability exists when reading U3D files in Open Design Alliance PRC SDK before 2022.11.High 7.8 · Dec 5, 2021
• CVE-2021-44045 An out-of-bounds write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11.High 7.8 · Dec 5, 2021
• CVE-2021-44044 An out-of-bounds write vulnerability exists when reading a JPG file using Open Design Alliance Drawings SDK before 2022.11.High 7.8 · Dec 5, 2021
• CVE-2021-43582 A Use-After-Free Remote Vulnerability exists when reading a DWG file using Open Design Alliance Drawings SDK before 2022.11.High 7.8 · Nov 22, 2021
• CVE-2021-43581 An Out-of-Bounds Read vulnerability exists when reading a U3D file using Open Design Alliance PRC SDK before 2022.11.High 8.8 · Nov 22, 2021
• CVE-2021-43391 An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11.High 7.8 · Nov 14, 2021
• CVE-2021-43390 An Out-of-Bounds Write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11.High 7.8 · Nov 14, 2021
• CVE-2021-43336 An Out-of-Bounds Write vulnerability exists when reading a DXF or DWG file using Open Design Alliance Drawings SDK before 2022.11.High 7.8 · Nov 14, 2021
• CVE-2021-43280 A stack-based buffer overflow vulnerability exists in the DWF file reading procedure in Open Design Alliance Drawings SDK before 2022.8.High 7.8 · Nov 14, 2021
• CVE-2021-43279 An out-of-bounds write vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10.High 7.8 · Nov 14, 2021
• CVE-2021-43278 An Out-of-bounds Read vulnerability exists in the OBJ file reading procedure in Open Design Alliance Drawings SDK before 2022.11.High 7.8 · Nov 14, 2021
• CVE-2021-43277 An out-of-bounds read vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10.High 7.8 · Nov 14, 2021