CVE-2021-43276

The CVE-2021-43276 entry concerns Open Design Alliance ODA Viewer prior to 2022.8, which contains an Out-of-bounds Read issue in DWF file parsing that can trigger a read past the end of an allocated buffer. The vulnerability could allow an attacker to execute arbitrary code in the context of the ...

CVE-2021-43272

CVE-2021-43272 relates to Open Design Alliance ODAViewer: a parsing flaw in DWF handling that can lead to remote code execution. The ZDI advisories (ZDI-21-1358, ZDI-21-1360, ZDI-21-1363) describe a stack-based buffer overflow in the DWF file parser, caused by insufficient validation of the lengt...