CVE-2021-32944

2021-06-1712:50:37

CWE-416

icscert

www.cve.org

drawings sdk

dgn file-reading

use-after-free

memory corruption

arbitrary code execution

denial-of-service

validation of user-supplied data

cve-2021-32944

EPSS

0.001

Percentile

50.8%

JSON

A use-after-free issue exists in the DGN file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied data. This can result in a memory corruption or arbitrary code execution, allowing attackers to cause a denial-of-service condition or execute code in the context of the current process.

CNA Affected

[
  {
    "product": "Drawings SDK",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to 2022.4"
      }
    ]
  }
]