CVE-2021-32950

CVE-2021-32950 concerns the Open Design Alliance Drawings SDK DXF parsing. The issue is an out-of-bounds read when processing DXF files in all versions before 2022.4, caused by insufficient validation of untrusted input. This can lead to reading beyond an allocated buffer and may enable denial-of...

CVE-2021-32946

An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK Version 2022.4 and prior resulting from the lack of proper validation of the user-supplied data. This may result in several of out-of-bounds problems and allow attackers to cause a...

CVE-2021-32946

An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK Version 2022.4 and prior resulting from the lack of proper validation of the user-supplied data. This may result in several of out-of-bounds problems and allow attackers to cause a...

Input validation

An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK Version 2022.4 and prior resulting from the lack of proper validation of the user-supplied data. This may result in several of out-of-bounds problems and allow attackers to cause a...

CVE-2021-32952

The CVE-2021-32952 entry concerns the Open Design Alliance Drawings SDK (DGN file-reading procedure) with versions up to 2022.4. Root cause: an out-of-bounds write due to insufficient validation of user-supplied data, enabling a write past the end of an allocated buffer. Impact: denial-of-service...

CVE-2021-32952

An out-of-bounds write issue exists in the DGN file-reading procedure in the Drawings SDK Version 2022.4 and prior resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a denial-of-service...

CVE-2021-32946

An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK Version 2022.4 and prior resulting from the lack of proper validation of the user-supplied data. This may result in several of out-of-bounds problems and allow attackers to cause a...

CVE-2021-32946

CVE-2021-32946 affects Siemens/Open Design Alliance Drawings SDK parsing of DGN files (Versions 2022.4 and earlier). Root cause: improper validation of user-supplied data in the Drawings SDK parsing path, leading to out-of-bounds conditions that may cause denial-of-service or code execution in th...

CVE-2021-32938

Drawings SDK All versions prior to 2022.4 are vulnerable to an out-of-bounds read due to parsing of DWG files resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allows attackers to cause a denial-of service conditi...

CVE-2021-32936

CVE-2021-32936 is an out-of-bounds write in the Open Design Alliance Drawings SDK (prior to 2022.4) during parsing of DXF files, caused by insufficient validation of user-supplied data. This can write past the end of an allocated buffer, enabling denial-of-service or arbitrary code execution in t...

CVE-2021-32940

CVE-2021-32940 is an out-of-bounds read in the Open Design Alliance Drawings SDK DWG file-recovering procedure, affecting all versions prior to 2022.5. The issue stems from improper validation of user-supplied data and can cause a read past the end of an allocated buffer, enabling denial-of-servi...

CVE-2021-32948

An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a denial-of-servic...

CVE-2021-32940

An out-of-bounds read issue exists in the DWG file-recovering procedure in the Drawings SDK All versions prior to 2022.5 resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allow attackers to cause a denial-of-servi...

Softing OPC-UA C++ SDK

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Softing Equipment: OPC-UA C++ SDK Vulnerability: Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION A remote attacker may be able to crash the device, resulting...

PT-2021-19982 · Unknown · Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Drawings SDK versions prior to 2022.4 Description: An out-of-bounds write issue exists in the DXF file-recovering procedure due to the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated...

CVE-2021-32938

CVE-2021-32938 affects the Open Design Alliance Drawings SDK (prior to 2022.4). The vulnerability is an out-of-bounds read when parsing DWG files, caused by insufficient validation of user-supplied data. This can lead to reading past the end of an allocated buffer and may enable denial-of-service...

CVE-2021-32936

An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a...

GHSA-Q4HM-FWC9-HMV6 Insecure temporary file used in com.squareup:connect

This affects all versions of package com.squareup:connect. The method prepareDownloadFilecreates creates a temporary file with the permissions bits of -rw-r--r-- on unix-like systems. On unix-like systems, the system temporary directory is shared between users. As such, the contents of the file...

Critical ThroughTek Flaw Opens Millions of Connected Cameras to Eavesdropping

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday issued an advisory regarding a critical software supply-chain flaw impacting ThroughTek's software development kit SDK that could be abused by an adversary to gain improper access to audio and video streams. "Successful...

[SECURITY] Fedora 33 Update: dotnet3.1-3.1.116-1.fc33

.NET Core is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET Core contains a runtime conforming to .NET Standards a set of...