VYPR

Drawings SDK

by Opendesign

CVEs (27)

  • CVE-2021-32936HigJun 17, 2021
    risk 0.51cvss 7.8epss 0.03

    An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to…

  • CVE-2021-32946HigJun 17, 2021
    risk 0.51cvss 7.8epss 0.03

    An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper validation of the user-supplied data. This may result in several of out-of-bounds problems and allow…

  • CVE-2021-31784HigApr 26, 2021
    risk 0.51cvss 7.8epss 0.01

    An out-of-bounds write vulnerability exists in the file-reading procedure in Open Design Alliance Drawings SDK before 2021.6 on all supported by ODA platforms in static configuration. This can allow attackers to cause a crash, potentially enabling a denial of service attack…

  • CVE-2021-32950HigJun 17, 2021
    risk 0.46cvss 7.1epss 0.02

    An out-of-bounds read issue exists within the parsing of DXF files in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allows attackers to cause a…

  • CVE-2021-32940HigJun 17, 2021
    risk 0.46cvss 7.1epss 0.02

    An out-of-bounds read issue exists in the DWG file-recovering procedure in the Drawings SDK (All versions prior to 2022.5) resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allow attackers to…

  • CVE-2021-32938HigJun 17, 2021
    risk 0.46cvss 7.1epss 0.01

    Drawings SDK (All versions prior to 2022.4) are vulnerable to an out-of-bounds read due to parsing of DWG files resulting from the lack of proper validation of user-supplied data. This can result in a read past the end of an allocated buffer and allows attackers to cause a…

  • CVE-2021-43273LowNov 14, 2021
    risk 0.22cvss 3.3epss 0.01

    An Out-of-bounds Read vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.11. Crafted data in a DGN file and lack of verification of input data can trigger a read past the end of an allocated buffer. An attacker can leverage…

Page 2 of 2