Open Design Alliance Drawings SDK has an unspecified vulnerability (CNVD-2021-89164)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The package provides access to data in .dwg and .dgn through a convenient, object-oriented API, providing a C API, support for repair files, support for . An out - bounds Write vulnerability exists when reading DXF files. The specific issue exists in the parsing of DXF files. carefully crafted data (invalid number of attributes) in a DXF file could trigger a write operation beyond the end of the allocated buffer. An attacker could exploit this vulnerability to execute code in the context of the current process.