Open Design Alliance Drawings SDK
Successful exploitation of these vulnerabilities may allow code execution in the context of the current process or cause a denial-of-service condition.
describes (8)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-32952US | high7.8 | — | ||
An out-of-bounds write issue exists in the DGN file-reading procedure in the Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper validation of user-supplied d… | ||||
| CVE-2021-32950US | high7.1 | — | ||
An out-of-bounds read issue exists within the parsing of DXF files in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied… | ||||
| CVE-2021-32948US | high7.8 | — | ||
An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-suppli… | ||||
| CVE-2021-32944US | high7.8 | — | ||
A use-after-free issue exists in the DGN file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied dat… | ||||
| CVE-2021-32940US | high7.1 | — | ||
An out-of-bounds read issue exists in the DWG file-recovering procedure in the Drawings SDK (All versions prior to 2022.5) resulting from the lack of proper validation of user-supp… | ||||
| CVE-2021-32938US | high7.1 | — | ||
Drawings SDK (All versions prior to 2022.4) are vulnerable to an out-of-bounds read due to parsing of DWG files resulting from the lack of proper validation of user-supplied data.… | ||||
| CVE-2021-32936US | high7.8 | — | ||
An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-sup… | ||||
| CVE-2021-32946US | high7.8 | — | ||
An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper val… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-21-159-02 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-21-159-02 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (8)
- MitigationDrawings SDK
Open Design Alliance recommends updating to v2022.5 or later (login and ODA membership required).
https://docs.opendesign.com/td/frames.html?frmname=topic&frmfile=MovingToNewVersion.html - MitigationDrawings SDK
Open Design Alliance recommends updating to v2022.5 or later (login and ODA membership required).
https://docs.opendesign.com/td/frames.html?frmname=topic&frmfile=MovingToNewVersion.html - MitigationDrawings SDK
Open Design Alliance recommends updating to v2022.5 or later (login and ODA membership required).
https://docs.opendesign.com/td/frames.html?frmname=topic&frmfile=MovingToNewVersion.html - MitigationDrawings SDK
Open Design Alliance recommends updating to v2022.5 or later (login and ODA membership required).
https://docs.opendesign.com/td/frames.html?frmname=topic&frmfile=MovingToNewVersion.html - MitigationDrawings SDK
Open Design Alliance recommends updating to v2022.5 or later (login and ODA membership required).
https://docs.opendesign.com/td/frames.html?frmname=topic&frmfile=MovingToNewVersion.html - MitigationDrawings SDK
Open Design Alliance recommends updating to v2022.5 or later (login and ODA membership required).
https://docs.opendesign.com/td/frames.html?frmname=topic&frmfile=MovingToNewVersion.html - MitigationDrawings SDK
Open Design Alliance recommends updating to v2022.5 or later (login and ODA membership required).
https://docs.opendesign.com/td/frames.html?frmname=topic&frmfile=MovingToNewVersion.html - MitigationDrawings SDK
Open Design Alliance recommends updating to v2022.5 or later (login and ODA membership required).
https://docs.opendesign.com/td/frames.html?frmname=topic&frmfile=MovingToNewVersion.html
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan