CVE-2021-44045
Description
An out-of-bounds write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN files. Crafted data in a DGN file and lack of proper validation for the XFAT sectors count can trigger a write operation past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Out-of-bounds write in ODA Drawings SDK DGN parsing before 2022.11 allows code execution via crafted DGN file.
Vulnerability
An out-of-bounds write vulnerability exists in the Open Design Alliance Drawings SDK prior to version 2022.11 when reading DGN files. The issue is located in the parsing of DGN files, specifically due to a lack of proper validation for the XFAT sectors count. Crafted data in a DGN file can trigger a write operation past the end of an allocated buffer.
Exploitation
An attacker can exploit this vulnerability by crafting a malicious DGN file with specially crafted XFAT sector data. The user must open the malicious file using an application that utilizes the vulnerable SDK. No authentication or special network position is required; the attack is file-based.
Impact
Successful exploitation allows the attacker to execute arbitrary code in the context of the current process, leading to potential full compromise of the affected system.
Mitigation
Fixed in version 2022.11 of the ODA Drawings SDK. Users should update to this version or later. Refer to the Open Design Alliance security advisory [1] for more details.
AI Insight generated on May 27, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
2- Open Design Alliance/Drawings SDKdescription
- Range: <2022.11
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.opendesign.com/security-advisoriesmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.