Description
An issue was discovered in Open Design Alliance Drawings SDK before 2024.1. A crafted DWG file can force the SDK to reuse an object that has been freed. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code.
Advisories 6
- NCSC-2024-0332 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Aug 13, 2024
- ICSA-24-228-08 Siemens COMOS CISA ICS & IT advisories · Aug 13, 2024
- SSA-659443 SSA-659443: Local Code Execution Vulnerabilities in COMOS Before V10.5 Siemens ProductCERT · Aug 13, 2024
- ICSA-23-353-04 Open Design Alliance Drawing SDK CISA ICS & IT advisories · Dec 19, 2023
- ICSA-23-166-09 Siemens Solid Edge CISA ICS & IT advisories · Nov 14, 2023
- SSA-975766 SSA-975766: Open Design Alliance Drawings SDK Vulnerability in Solid Edge Siemens ProductCERT · Nov 14, 2023