Opendesign Drawings Software Development Kit — known CVE vulnerabilities

Every CVE whose affected-product data names Opendesign Drawings Software Development Kit, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (13)

• CVE-2021-25173 — CVSS 7.8 (high): An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory allocation with excessive size vulnerability exists…
• CVE-2021-25174 — CVSS 7.8 (high): An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory corruption vulnerability exists when reading…
• CVE-2021-25175 — CVSS 7.8 (high): An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when rendering malformed .DXF…
• CVE-2021-25176 — CVSS 7.8 (high): An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when rendering malformed…
• CVE-2021-25177 — CVSS 7.8 (high): An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when rendering malformed .DXF…
• CVE-2021-25178 — CVSS 7.8 (high): An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability exists when the…
• CVE-2021-43274 — CVSS 7.8 (high): A Use After Free Vulnerability exists in the Open Design Alliance Drawings SDK before 2022.11. The specific flaw exists within the parsing…
• CVE-2021-43275 — CVSS 7.8 (high): A Use After Free vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue…
• CVE-2021-43280 — CVSS 7.8 (high): A stack-based buffer overflow vulnerability exists in the DWF file reading procedure in Open Design Alliance Drawings SDK before 2022.8…
• CVE-2021-43336 — CVSS 7.8 (high): An Out-of-Bounds Write vulnerability exists when reading a DXF or DWG file using Open Design Alliance Drawings SDK before 2022.11. The…
• CVE-2021-43390 — CVSS 7.8 (high): An Out-of-Bounds Write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific…
• CVE-2021-43391 — CVSS 7.8 (high): An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11. The specific…
• CVE-2022-23095 — CVSS 7.8 (high): Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files. Unchecked input data from a crafted JPG file leads…