Description
An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists when reading a DWG file with an invalid vertex number in a recovery mode. An attacker can leverage this vulnerability to execute code in the context of the current process.
Advisories 4
- ICSA-23-320-09 Siemens COMOS CISA ICS & IT advisories · Nov 14, 2023
- SSA-137900 SSA-137900: Multiple Vulnerabilities in COMOS Siemens ProductCERT · Nov 14, 2023
- ICSA-22-195-11 Open Design Alliance Drawings SDK CISA ICS & IT advisories · Sep 13, 2022
- SSA-429204 SSA-429204 Open Design Alliance Drawings SDK Vulnerabilities in JT2Go and Teamcenter Visualization Siemens ProductCERT · Sep 13, 2022