Oda Drawings Sdk All Versions < 2026.12
Approved changes feed: RSS · Atom
cpe:2.3:a:open_design_alliance:oda_drawings_sdk_-_all_versions_<_2026.12:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Open Design Alliance (13abdbcc-9403-5037-8522-fe009117cc47) |
|---|---|
| Product | Oda Drawings Sdk All Versions < 2026.12 (54ff8457-5ad7-540c-a322-0592df9ee6b7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-10021 |
vulnerable | 2026-06-08 07:02:26.162165 |
Details available
A Use of Uninitialized Variable vulnerability exists in Open Design Alliance Drawings SDK static versions (mt) before 2026.12. Static object `COdaMfcAppApp theApp` may access `OdString::kEmpty` before its initialization. Due to undefined initialization order of static objects across translation units (Static Initialization Order Fiasco), the application accesses uninitialized memory. This results in application crash on startup, causing denial of service. Due to undefined behavior, memory corruption and potential arbitrary code execution cannot be ruled out in specific exploitation scenarios.
Published: 2025-12-22T15:48:07.288Z
Updated: 2025-12-22T16:07:59.129Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.