Vulnerabilities (CVE)

Filtered by vendor Opendesign Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-43272 1 Opendesign 1 Oda Viewer 2021-12-06 7.5 HIGH 9.8 CRITICAL
An improper handling of exceptional conditions vulnerability exists in Open Design Alliance ODA Viewer sample before 2022.11. ODA Viewer continues to process invalid or malicious DWF files instead of stopping upon an exception. An attacker can leverage this vulnerability to execute code in the context of the current process.
CVE-2021-31784 1 Opendesign 1 Drawings Sdk 2021-05-04 7.5 HIGH 9.8 CRITICAL
An out-of-bounds write vulnerability exists in the file-reading procedure in Open Design Alliance Drawings SDK before 2021.6 on all supported by ODA platforms in static configuration. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart) or possible code execution.