CVE-2021-43390

CVE-2021-43390 refers to an out-of-bounds write in the Open Design Alliance (ODA) Drawings SDK when parsing DGN files. The issue occurs due to improper validation of crafted DGN data, allowing a write past the end of a buffer and potentially enabling code execution in the attacker’s context. Affe...

CVE-2021-43390

An Out-of-Bounds Write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN files. Crafted data in a DGN file and lack of proper validation of input data can trigger a write operation past the end ...