CVE-2021-44044

An out-of-bounds write vulnerability exists when reading a JPG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing JPG files. Crafted data in a JPG 4 extraneous bytes before the marker 0xca can trigger a write operation past the end of an allocated...

CVE-2021-44044

An out-of-bounds write vulnerability exists when reading a JPG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing JPG files. Crafted data in a JPG 4 extraneous bytes before the marker 0xca can trigger a write operation past the end of an allocated...

CVE-2021-44044

An out-of-bounds write vulnerability exists when reading a JPG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing JPG files. Crafted data in a JPG 4 extraneous bytes before the marker 0xca can trigger a write operation past the end of an allocated...

CVE-2021-44048

Open Design Alliance (ODA) Drawings Explorer contains an out-of-bounds write vulnerability in its TIF file parsing after loading TIF data. The issue occurs in affected versions prior to 2022.11 and can trigger a write past the end of an allocated buffer, enabling code execution in the context of ...

CVE-2021-44048

An out-of-bounds write vulnerability exists when reading a TIF file using Open Design Alliance ODA Drawings Explorer before 2022.11. The specific issue exists after loading TIF files. Crafted data in a TIF file can trigger a write operation past the end of an allocated buffer. An attacker can...

CVE-2021-44047

A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing DWF/DWFX files. Crafted data in a DWF/DWFX file and lack of proper validation of input data can trigger a write operation past the end ...

CVE-2021-44045

Open Design Alliance Drawings SDK (ODA) prior to 2022.11 is affected. The issue lies in DGN file parsing where crafted data and a lack of validation for XFAT sectors count trigger an out-of-bounds write past an allocated buffer, allowing code execution in the current process. Related advisories (...

CVE-2021-44044

CVE-2021-44044 affects Open Design Alliance Drawings SDK (and related Drawings Explorer) via an out-of-bounds write during JPG parsing. Crafting a JPG with 4 extraneous bytes before marker 0xCA can write past the end of an allocated buffer, enabling code execution in the current process. Several ...

CVE-2021-44045: Out-of-bounds Write

An out-of-bounds write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN files. Crafted data in a DGN file and lack of proper validation for the XFAT sectors count can trigger a write operation...

CVE-2021-44044: Out-of-bounds Write

An out-of-bounds write vulnerability exists when reading a JPG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing JPG files. Crafted data in a JPG 4 extraneous bytes before the marker 0xca can trigger a write operation past the end of an allocated...

CVE-2021-44048: Out-of-bounds Write

An out-of-bounds write vulnerability exists when reading a TIF file using Open Design Alliance ODA Drawings Explorer before 2022.11. The specific issue exists after loading TIF files. Crafted data in a TIF file can trigger a write operation past the end of an allocated buffer. An attacker can...

CVE-2021-44047: Use After Free

A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing DWF/DWFX files. Crafted data in a DWF/DWFX file and lack of proper validation of input data can trigger a write operation past the end ...

Open Design Alliance (ODA) Drawings Explorer Out-of-Bounds Writing Vulnerability

Open Design Alliance ODA Drawings Explorer is a browser. An out-of-bounds write vulnerability exists in Open Design Alliance ODA Drawings Explorer, which can be exploited by attackers to execute code in the context of the current process...

Open Design Alliance Drawings SDK Post-release Reuse Vulnerability (CNVD-2022-00615)

The Open Design Alliance Drawings SDK is a software development kit for drawing design from Open Design Alliance, Inc. The Open Design Alliance Drawings SDK is vulnerable to a post-release reuse vulnerability caused by failure to verify the existence of an object before performing operations on i...

Open Design Alliance Drawings SDK Out-of-Bounds Writing Vulnerability (CNVD-2022-01426)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The package provides access to data in .dwg and .dgn through a convenient, object-oriented API, C API, support for repair files, support for . The vulnerability can be...

Open Design Alliance Drawings SDK Out-of-Bounds Writing Vulnerability (CNVD-2022-01428)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The SDK provides easy, object-oriented API access to data in .dwg and .dgn, C API, file repair support, support for . code execution...

PT-2021-24031 · Open Design Alliance · Open Design Alliance Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2022.11 Description: The issue exists within the parsing of DGN files, where crafted data and a lack of proper validation for the XFAT sectors count can trigger a write operation past the en...

Open Design Alliance (ODA) Drawings Explorer DXF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance ODA Drawings Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fl...

PT-2021-24030

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2022.11 Description: An out-of-bounds write issue exists when parsing JPG files, specifically when crafted data in a JPG 4 extraneous bytes before the marker 0xca can trigger a write operati...

PT-2021-24034

Name of the Vulnerable Software and Affected Versions: Open Design Alliance ODA Drawings Explorer versions prior to 2022.11 Description: An out-of-bounds write issue exists when reading a TIF file. The specific issue occurs after loading TIF files. Crafted data in a TIF file can trigger a write...