Drawings SDK out-of-bounds read vulnerability (CNVD-2021-94906)

Drawings SDK is a development kit from the Open Design Alliance that gives you access to all .dwg and .dgn data via an object-oriented API that lets you create and edit any type of .dwg and .dgn drawing file. OBJ file reader in versions of Drawings SDK prior to 2022.11 An out-of-bounds read vulnerability exists. The vulnerability stems from a lack of validation of the input length. An attacker could exploit this vulnerability to execute code in the context of the current process via a specially crafted OBJ file.