Description
An issue was discovered in Open Design Alliance
Drawings SDK before 2024.12. A corrupted value of number
of sectors used by the Fat structure in a crafted DGN file leads to an
out-of-bounds write. An attacker can leverage this vulnerability to execute
code in the context of the current process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Open Design Alliance | ODA Drawings SDK - All Versions < 2024.12 | < 2024.12 | 2024.12 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
superswan/HeimShell ★ 1 · Jun 26, 2025
CVE-2023-5180 LinuxServer.io Heimdall before 2.5.7 does not prevent use of icons that have non-image data such as the "<?php ?>" substring.
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 3
- NCSC-2024-0332 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Aug 13, 2024
- ICSA-24-228-08 Siemens COMOS CISA ICS & IT advisories · Aug 13, 2024
- SSA-659443 SSA-659443: Local Code Execution Vulnerabilities in COMOS Before V10.5 Siemens ProductCERT · Aug 13, 2024
References
- https://www.opendesign.com/security-advisories vendor-advisory