Design/Logic Flaw

A Use-After-Free Remote Vulnerability exists when reading a DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DWG files. The issue results from the lack of validating the existence of an object prior to performing operations on the...

CVE-2021-43582

A Use-After-Free Remote Vulnerability exists when reading a DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DWG files. The issue results from the lack of validating the existence of an object prior to performing operations on the...

CVE-2021-43582

CVE-2021-43582 is an Use-After-Free vulnerability in the Open Design Alliance Drawings SDK (and related ODA tools) related to DWG file parsing prior to 2022.11. The issue arises from not validating an object's existence before performing operations, enabling an attacker to execute code in the cur...

CVE-2021-43581

Open Design Alliance PRC SDK (and related ODAViewer components handling U3D) is affected by an Out-of-Bounds Read in the U3D file parser. The root cause is the incorrect use of the LibJpeg source manager inside the U3D library, with crafted U3D data triggering a read past the end of an allocated ...

Moddable SDK Heap Buffer Overflow Vulnerability (CNVD-2021-90314)

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, Inc. A buffer overflow vulnerability exists in Moddable SDK v10.5.0, which originates in the /moddable/xs/sources/xsSymbol.c file A heap-based buffer overflow vulnerability exists in the fxIDToStri...

Moddable SDK Heap Buffer Overflow Vulnerability (CNVD-2021-90313)

The Moddable SDK is a combination of development tools and runtime software used to create applications for microcontrollers. a security vulnerability exists in the Moddable SDK, which stems from a networked system or product that does not properly validate data boundaries when performing...

Moddable SDK buffer over-read vulnerability

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable U.S. A security vulnerability exists in the Moddable SDK, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, resulti...

Moddable SDK Stack Overflow Vulnerability (CNVD-2021-90311)

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable U.S. A security vulnerability exists in the Moddable SDK, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, resulti...

Amazon AWS IoT Device SDK 信任管理问题漏洞

The Amazon AWS IoT Device SDK is a collection of C source files under the MIT Open Source License from Amazon.com, Inc. that can be used in embedded applications to securely connect IoT devices to the AWS IoT Core.It includes an MQTT, JSON parser, and the AWS IoT Device Shadow library. It is...

Moddable SDK Heap Buffer Overflow Vulnerability (CNVD-2021-90317)

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable U.S.A. A buffer error vulnerability exists in Moddable SDK v10.5.0, which originates in the software component module /modules/network/wifi/esp/modwifi. c is vulnerable to a heap-based buffer...

Moddable SDK Heap Buffer Overflow Vulnerability (CNVD-2021-90315)

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, Inc. A buffer error vulnerability exists in Moddable SDK v10.5.0, which originates in the fx Stringprototyperepeat function in the /moddable/xs/sources/xsString.c file is vulnerable to a heap-based...

GHSA-6C7M-QWXJ-MVHP Broken encryption in EdgeX Foundry

Summary Broken encryption in app-functions-sdk “AES” transform in EdgeX Foundry releases prior to Jakarta allows attackers to decrypt messages via unspecified vectors. Detailed Description The app-functions-sdk exports an “aes” transform that user scripts can optionally call to encrypt data in th...

CVE-2021-41278

Functions SDK for EdgeX is meant to provide all the plumbing necessary for developers to get started in processing/transforming/exporting data out of the EdgeX IoT platform. In affected versions broken encryption in app-functions-sdk “AES” transform in EdgeX Foundry releases prior to Jakarta allo...

Input validation

Functions SDK for EdgeX is meant to provide all the plumbing necessary for developers to get started in processing/transforming/exporting data out of the EdgeX IoT platform. In affected versions broken encryption in app-functions-sdk “AES” transform in EdgeX Foundry releases prior to Jakarta allo...

Moddable SDK 缓冲区错误漏洞

The Moddable SDK is a combination of development tools and runtime software used to create applications for microcontrollers. a security vulnerability exists in the Moddable SDK, which stems from a networked system or product that does not properly validate data boundaries when performing...

Amazon AWS SDK Information Disclosure Vulnerability

Amazon AWS SDK for Android is an Andorid-based software development kit for Amazon Web Services AWS from Amazon.com. An information disclosure vulnerability exists in Amazon AWS SDK 1.7.22 and earlier. A remote attacker could use the vulnerability to access AWS S3 developer files by reading...

Open Design Alliance Drawings SDK Out-of-Bounds Reading Vulnerability (CNVD-2022-01430)

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The SDK provides access to data in .dwg and .dgn through a convenient, object-oriented API that provides a C API, support for repair files, support for . The vulnerabili...

Moddable SDK 缓冲区错误漏洞

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable U.S. A security vulnerability exists in the Moddable SDK, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, resulti...

Moddable SDK 缓冲区错误漏洞

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, Inc. A buffer error vulnerability exists in Moddable SDK v10.5.0, which originates in the fx Stringprototyperepeat function in the /moddable/xs/sources/xsString.c file is vulnerable to a heap-based...

Moddable SDK 缓冲区错误漏洞

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable U.S. A security vulnerability exists in the Moddable SDK, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, resulti...