Lucene search
PRIOn knowledge basePRION:CVE-2023-22669HistoryApr 15, 2023 - 1:15 a.m.
Heap overflow
2023-04-1501:15:00
PRIOn knowledge base
www.prio-n.com
8
heap overflow
open design alliance
dwg files
validation
xrecord data
buffer overflow
code execution
nvd
0.001 Low
EPSS
Percentile
27.2%
Parsing of DWG files in Open Design Alliance Drawings SDK before 2023.6 lacks proper validation of the length of user-supplied XRecord data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
| CPE | Name | Operator | Version |
|---|---|---|---|
| drawings_sdk | lt | 2023.6 |
References
Related
cnvd
cnvd
Siemens Solid Edge Heap Buffer Overflow Vulnerability (CNVD-2023-09120)
2023-02-14 00:00:00
zdi
zdi
cve
cve
CVE-2023-22669
2023-04-15 01:15:06
cvelist
cvelist
CVE-2023-22669
2023-04-15 00:00:00
nvd
nvd
CVE-2023-22669
2023-04-15 01:15:06
ics
ics
Open Design Alliance Drawing SDK
2023-12-19 12:00:00
Siemens COMOS
2023-11-16 12:00:00
Siemens Solid Edge
2023-02-16 12:00:00