CVE-2021-44045

Open Design Alliance Drawings SDK (ODA) prior to 2022.11 is affected. The issue lies in DGN file parsing where crafted data and a lack of validation for XFAT sectors count trigger an out-of-bounds write past an allocated buffer, allowing code execution in the current process. Related advisories (...