CVE-2024-8894: Out-of-bounds Write vulnerability in ODA SDK versions < 2025.10
Out-of-bounds Write vulnerability was discovered in Open Design Alliance Drawings SDK before 2025.10. Reading crafted DWF file and missing proper checks on received SectionIterator data can trigger an unhandled exception. This can allow attackers to cause a crash, potentially enabling a denial-of-service attack (Crash, Exit, or Restart) or possible code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8894?
CVE-2024-8894 has been categorized with a high severity rating due to its potential to cause application crashes and facilitate further exploitation.
How do I fix CVE-2024-8894?
To mitigate CVE-2024-8894, upgrade to Open Design Alliance Drawings SDK version 2025.10 or later, where the vulnerability is addressed.
What types of issues can CVE-2024-8894 cause?
CVE-2024-8894 can lead to application crashes and may enable attackers to execute arbitrary code under certain conditions.
Which software versions are affected by CVE-2024-8894?
CVE-2024-8894 affects Open Design Alliance Drawings SDK versions prior to 2025.10.
What can an attacker achieve by exploiting CVE-2024-8894?
By exploiting CVE-2024-8894, an attacker can trigger unhandled exceptions that may crash the application, potentially leading to denial-of-service attacks.