CVE-2021-43275: Use After Free

A Use After Free vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute...

PT-2021-23825

Name of the Vulnerable Software and Affected Versions Open Design Alliance Drawings SDK versions prior to 2022.11 Description The issue exists within the parsing of DGN files, where crafted data and lack of proper validation of input data can trigger a write operation past the end of an allocated...

Open Design Alliance Drawings SDK 安全漏洞

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The Open Design Alliance Drawings SDK contains a security vulnerability that results from an exception vulnerability in the sample The ODA Viewer continues to process...

CVE-2021-43391: Out-of-bounds Read

An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF files. Crafted data in a DXF file an invalid dash counter in line types can trigger a read past the end of an allocated...

CVE-2021-43273: Out-of-bounds Read

An Out-of-bounds Read vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.11. Crafted data in a DGN file and lack of verification of input data can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability t...

PT-2021-23826 · Open Design Alliance · Open Design Alliance Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2022.11 Description: The issue exists within the parsing of DXF files, where crafted data can trigger a read past the end of an allocated buffer, allowing an attacker to execute code in the...

CVE-2021-43278: Out-of-bounds Read

An Out-of-bounds Read vulnerability exists in the OBJ file reading procedure in Open Design Alliance Drawings SDK before 2022.11. The lack of validating the input length can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the...

CVE-2021-43391

CVE-2021-43391 affects Open Design Alliance Drawings SDK prior to 2022.11. The vulnerability is an out-of-bounds read during DXF parsing caused by an invalid dash counter in line types, which could allow code execution in the context of the current process. Siemens/connected advisories confirm af...

Open Design Alliance Drawings SDK 缓冲区错误漏洞

Drawings SDK is a development kit from the Open Design Alliance that gives you access to all .dwg and .dgn data via an object-oriented API that lets you create and edit any type of .dwg and .dgn drawing file. OBJ file reader in versions of Drawings SDK prior to 2022.11 An out-of-bounds read...

PT-2021-23795

Name of the Vulnerable Software and Affected Versions Open Design Alliance Drawings SDK versions prior to 2022.8 Description A Use After Free vulnerability exists in the DGN file reading procedure. The issue results from the lack of validating the existence of an object prior to performing...

Open Design Alliance Drawings SDK 资源管理错误漏洞

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, USA. The SDK provides access to data in .dwg and .dgn through a convenient, object-oriented API, a C++ API, support for repairing files, and support for . A security...

Open Design Alliance Drawings SDK 缓冲区错误漏洞

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, USA. The SDK provides access to data in .dwg and .dgn through a convenient, object-oriented API, offering features such as a C++ API, support for repairing files, and .NET,...

Open Design Alliance Drawings SDK 资源管理错误漏洞

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, USA. The SDK provides access to data in .dwg and .dgn through a convenient, object-oriented API, offering features such as a C++ API, support for repairing files, and .NET,...

PT-2021-23798

Name of the Vulnerable Software and Affected Versions Open Design Alliance Drawings SDK versions prior to 2022.11 Description An Out-of-bounds Read issue exists in the OBJ file reading procedure due to the lack of input length validation, allowing a read past the end of an allocated buffer. This...

PT-2021-23794

Name of the Vulnerable Software and Affected Versions Open Design Alliance Drawings SDK versions prior to 2022.11 Description A Use After Free issue exists in the parsing of DWF files due to the lack of validation of an object's existence before performing operations on it. This can be leveraged ...

Siemens JT2Go < 13.2.0.2 Multiple Vulnerabilities (SSA-938030)

The version of Siemens JT2Go installed on the remote Windows hosts is prior to 13.2.0.2. It is, therefore, affected by multiple vulnerabilities, including the following: - An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Open Design Alliance...

Siemens JT2Go < 13.2.0.1 Multiple Vulnerabilities (SSA-365397)

The version of Siemens JT2Go installed on the remote Windows hosts is prior to 13.2.0.1. It is, therefore, affected by multiple vulnerabilities, including the following: - An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK resulting from the lack of prope...

CVE-2021-32944

A use-after-free issue exists in the DGN file-reading procedure in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a memory corruption or arbitrary code execution, allowing attackers to cause a denial-of-service...

CVE-2021-32950

An out-of-bounds read issue exists within the parsing of DXF files in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allows attackers to cause a denial-of-service...

CVE-2021-32952

An out-of-bounds write issue exists in the DGN file-reading procedure in the Drawings SDK Version 2022.4 and prior resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a denial-of-service...