CVE-2021-31501

Vulnerability

The vulnerability exists in the DWG file parsing component of OpenText Brava! Desktop version 16.6.3.84. The lack of proper validation of user-supplied data leads to a read past the end of an allocated data structure, resulting in an out-of-bounds read. This flaw is triggered when a user opens a specially crafted DWG file or visits a malicious page that loads such a file. [1]

Exploitation

An attacker must convince a user to open a malicious DWG file or visit a malicious web page that triggers the parsing. No authentication is required, but user interaction is necessary. The attacker can leverage this out-of-bounds read to disclose sensitive memory contents, and in combination with other vulnerabilities, potentially achieve arbitrary code execution. [1]

Impact

Successful exploitation allows an attacker to disclose sensitive information from the process memory. While the CVSS score is 3.3 (Low) for information disclosure, the advisory notes that this can be chained with other vulnerabilities to execute arbitrary code in the context of the current process. [1]

Mitigation

OpenText has not released a patch as of the advisory date (June 2, 2021). Users should limit exposure by avoiding opening untrusted DWG files or visiting untrusted pages. The vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog as of the publication date. [1]