First published: Sun Nov 14 2021(Updated: )
An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF files. Crafted data in a DXF file (an invalid dash counter in line types) can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Opendesign Drawings Software Development Kit | <2022.11 | |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-43391 is a vulnerability that allows remote attackers to disclose sensitive information on affected installations of Open Design Alliance (ODA) Drawings Explorer.
User interaction is required to exploit this vulnerability, such as visiting a malicious page or opening a malicious file.
The severity of CVE-2021-43391 is high, with a severity value of 7.8.
CVE-2021-43391 affects Open Design Alliance (ODA) Drawings Explorer and ODAViewer.
To mitigate CVE-2021-43391, it is recommended to update to the latest version of the affected software when a fix becomes available.