Skip to content
OpenAdvisories
High ICSA-23-353-04 3 CVEs

Open Design Alliance Drawing SDK

Published Dec 19, 2023 · Updated Dec 19, 2023

Vendor: Open Design Alliance (ODA) Product: Drawing SDK

Summary

Successful exploitation of this vulnerability could allow remote attackers to disclose sensitive information on affected installations of ODA Drawing SDK.

Vulnerabilities 3

  • High 7.8
    CVE-2023-22669

    Parsing of DWG files in Open Design Alliance Drawings SDK before 2023.6 lacks proper validation of the length of user-s…

  • High 7.8
    CVE-2023-22670

    A heap-based buffer overflow exists in the DXF file reading procedure in Open Design Alliance Drawings SDK before 2023.…

  • High 7.8
    CVE-2023-26495

    An issue was discovered in Open Design Alliance Drawings SDK before 2024.1. A crafted DWG file can force the SDK to reu…

Revision history

  1. #1

    Initial Publication

References