CVE-2023-5180: Out-of-bounds Write vulnerability exists in ODA Drawings SDK before 2024.12
An issue was discovered in Open Design Alliance Drawings SDK before 2024.12. A corrupted value of number of sectors used by the Fat structure in a crafted DGN file leads to an out-of-bounds write. An attacker can leverage this vulnerability to execute code in the context of the current process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-5180?
CVE-2023-5180 has a severity that can lead to potential code execution vulnerabilities.
How do I fix CVE-2023-5180?
To fix CVE-2023-5180, upgrade to Open Design Alliance Drawings SDK version 2024.12 or later.
What is CVE-2023-5180?
CVE-2023-5180 is a vulnerability in Open Design Alliance Drawings SDK that allows for an out-of-bounds write due to a corrupted value in a crafted DGN file.
Can CVE-2023-5180 be exploited remotely?
Yes, an attacker can exploit CVE-2023-5180 by using a specially crafted DGN file.
Which versions of Open Design Alliance Drawings SDK are affected by CVE-2023-5180?
Versions of Open Design Alliance Drawings SDK prior to 2024.12 are affected by CVE-2023-5180.