CVE-2021-25175

CVE-2021-25175 affects the Open Design Alliance Drawings SDK prior to 2021.11. It is a UNTRUSTED POINTER DEREFERENCE vulnerability that occurs while parsing DXF/DWG files, potentially allowing remote code execution in the context of the affected process. Public advisories (ZDI) describe remote co...

CVE-2021-25176

CVE-2021-25176 affects the Open Design Alliance Drawings SDK. It is a NULL pointer/untrusted pointer dereference when parsing malformed DXF/DWG files, leading to crashes and potential denial-of-service (with some sources indicating possible code execution). Affected versions are prior to 2021.11/...

CVE-2021-25176

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack Crash, Exit, or Restart...

CVE-2021-25177

Open Design Alliance Drawings SDK before 2021.11 contains a Type Confusion vulnerability when rendering malformed DXF/DWG files, leading to crashes or denial-of-service conditions. Public sources (including ICSA-21-047-01 and NVD/NV D equivalents) corroborate the issue and map this CVE to a type-...

CVE-2021-25177

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack Crash, Exit, or Restart...

CVE-2021-25178

Open Design Alliance Drawings SDK (pre-2021.12) contains a stack-based buffer overflow when parsing DXF/DWG files, CVE-2021-25178. This vulnerability could allow code execution or crash/DoS in affected deployments. Connected advisories (ICS/CISA) specify the affected Drawings SDK versions and ide...

CVE-2021-25178

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability exists when the recover operation is run with malformed .DXF and .DWG files. This can allow attackers to cause a crash potentially enabling a denial of service attack Crash,...

CVE-2021-25174: Out-of-bounds Write

An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory corruption vulnerability exists when reading malformed DGN files. It can allow attackers to cause a crash, potentially enabling denial of service Crash, Exit, or Restart...

CVE-2021-25176: NULL Pointer Dereference

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack Crash, Exit, or Restart...

PT-2021-16446

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2021.12 Description: A memory corruption issue exists when reading malformed DGN files, potentially allowing attackers to cause a crash and enabling denial of service. This can result in a...

PT-2021-16447

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2021.11 Description: An issue exists when rendering malformed .DXF and .DWG files, allowing attackers to cause a crash, potentially enabling a denial of service attack. This is due to a NULL...

CVE-2021-25173: Allocation of Resources Without Limits or Throttling

An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory allocation with excessive size vulnerability exists when reading malformed DGN files, which allows attackers to cause a crash, potentially enabling denial of service crash, exit, or restart...

CVE-2021-25177: Access of Resource Using Incompatible Type

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack Crash, Exit, or Restart...

CVE-2021-25175: Incorrect Type Conversion or Cast

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack Crash, Exit, or Restart...

Open Design Alliance Drawings SDK 代码问题漏洞

Drawings is a development platform for desktop, mobile and web applications targeting .dwg and .dgn data.Drawings SDK is the Drawings Software Development Kit. A null pointer dereference vulnerability exists in Open Design Alliance Drawings SDK versions prior to 2021.11. An attacker can exploit...

PT-2021-16449

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2021.11 Description: A stack-based buffer overflow issue exists when the recover operation is run with malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially...

PT-2021-16445

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2021.12 Description: An issue exists when reading malformed DGN files, which allows attackers to cause a crash, potentially enabling denial of service. This is due to a memory allocation wit...

CVE-2021-25178: Out-of-bounds Write

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability exists when the recover operation is run with malformed .DXF and .DWG files. This can allow attackers to cause a crash potentially enabling a denial of service attack Crash,...

Open Design Alliance Drawings SDK 代码问题漏洞

Drawings is a development platform for desktop, mobile and web applications targeting .dwg and .dgn data.Drawings SDK is the Drawings Software Development Kit. A null pointer dereference vulnerability exists in Open Design Alliance Drawings SDK versions prior to 2021.11. An attacker can exploit...

Open Design Alliance Drawings SDK 缓冲区错误漏洞

Drawings is a development platform for desktop, mobile and web applications targeting .dwg and .dgn data.Drawings SDK is the Drawings Software Development Kit. A stack buffer overflow vulnerability exists in Open Design Alliance Drawings SDK versions prior to 2021.11. An attacker can exploit this...