Skip to content
OpenAdvisories
High · 7.8 CVE-2023-23579 EUVD-2023-27679GHSA-2j5w-557m-jffq

Datakit CrossCAD/Ware

Published Apr 20, 2023 · Updated Jan 16, 2025 · Assigned by icscert

Description

Datakit CrossCadWare_x64.dll contains an out-of-bounds write past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This could allow an attacker to execute code in the context of the current process.

Affected products

VendorProductAffectedFixed
Datakit CrossCAD/Ware_x64 library 0 < 2023.1 2023.1

Advisories 3

References