Drawings Software Development Kit
Approved changes feed: RSS · Atom
cpe:2.3:a:opendesign:drawings_software_development_kit:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Opendesign (4c6a6462-62fb-5e5c-a482-efbb142678cd) |
|---|---|
| Product | Drawings Software Development Kit (bb5c0bf6-0b95-58d4-a3fd-82031fb4fe28) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-23095 |
vulnerable | 2026-06-08 05:40:56.301353 |
Details available
Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files. Unchecked input data from a crafted JPG file leads to memory corruption. An attacker can leverage this vulnerability to execute code in the context of the current process.
Published: 2022-01-15T14:36:32.000Z
Updated: 2025-05-05T16:28:04.492Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43391 |
vulnerable | 2026-06-08 05:36:43.315434 |
Details available
An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF files. Crafted data in a DXF file (an invalid dash counter in line types) can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
Published: 2021-11-14T00:00:00.000Z
Updated: 2024-08-04T03:55:28.535Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43390 |
vulnerable | 2026-06-08 05:36:43.314980 |
Details available
An Out-of-Bounds Write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN files. Crafted data in a DGN file and lack of proper validation of input data can trigger a write operation past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
Published: 2021-11-14T20:56:44.000Z
Updated: 2024-08-04T03:55:28.615Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43336 |
vulnerable | 2026-06-08 05:36:43.270695 |
Details available
An Out-of-Bounds Write vulnerability exists when reading a DXF or DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF and DWG files. Crafted data in a DXF or DWG file (an invalid number of properties) can trigger a write operation past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
Published: 2021-11-14T00:00:00.000Z
Updated: 2024-08-04T03:55:28.546Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43280 |
vulnerable | 2026-06-08 05:36:43.071981 |
Details available
A stack-based buffer overflow vulnerability exists in the DWF file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of proper validation of the length of user-supplied data before copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
Published: 2021-11-14T20:58:03.000Z
Updated: 2024-08-04T03:55:28.649Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43275 |
vulnerable | 2026-06-08 05:36:43.066561 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43274 |
vulnerable | 2026-06-08 05:36:43.065952 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25178 |
vulnerable | 2026-06-08 05:30:40.170192 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25177 |
vulnerable | 2026-06-08 05:30:40.169495 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25176 |
vulnerable | 2026-06-08 05:30:40.168837 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25175 |
vulnerable | 2026-06-08 05:30:40.168133 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25174 |
vulnerable | 2026-06-08 05:30:40.167256 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25173 |
vulnerable | 2026-06-08 05:30:40.163593 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.