CVE-2022-28809: High severity opendesign drawings software development kit vulnerability

Q: What is CVE-2022-28809?

CVE-2022-28809 is a vulnerability in Open Design Alliance Drawings SDK that allows an attacker to execute code in the context of the current process.

Q: How severe is CVE-2022-28809?

CVE-2022-28809 has a severity score of 7.8 (high).

Q: What is the affected software?

The affected software is Open Design Alliance Drawings SDK before version 2023.3.

Q: How can an attacker exploit CVE-2022-28809?

An attacker can exploit CVE-2022-28809 by reading a DWG file with an invalid vertex number in a recovery mode.

Q: Is there a fix available for CVE-2022-28809?

Yes, upgrading to Open Design Alliance Drawings SDK version 2023.3 or newer will fix CVE-2022-28809.

Published Jul 17, 2022

Updated

An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists when reading a DWG file with an invalid vertex number in a recovery mode. An attacker can leverage this vulnerability to execute code in the context of the current process.

Affected Software

1 affected component

Opendesign Drawings Sdk<2023.3

Event History

Jul 17, 2022

CVE Published

via MITRE·10:21 PM

Data Sourced

via MITRE·10:21 PM

Description

Frequently Asked Questions

What is CVE-2022-28809?

CVE-2022-28809 is a vulnerability in Open Design Alliance Drawings SDK that allows an attacker to execute code in the context of the current process.

How severe is CVE-2022-28809?

CVE-2022-28809 has a severity score of 7.8 (high).

What is the affected software?

The affected software is Open Design Alliance Drawings SDK before version 2023.3.

How can an attacker exploit CVE-2022-28809?

An attacker can exploit CVE-2022-28809 by reading a DWG file with an invalid vertex number in a recovery mode.

Is there a fix available for CVE-2022-28809?