Approved changes feed: RSS · Atom

cpe:2.3:a:beijing_honghu_yuntu_technology:fast_cad_reader:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBeijing Honghu Yuntu Technology (ddf59df2-f9f1-5fdd-8b01-ecd587bd8ab2)
ProductFast Cad Reader (2e02212e-a062-57f4-8efd-5bc35adbf842)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-2098 vulnerable 2026-06-08 07:14:58.014311 Dylib Hijacking in Fast CAD Reader
Fast CAD Reader application on MacOS was found to be installed with incorrect file permissions (rwxrwxrwx). This is inconsistent with standard macOS security practices, where applications should have drwxr-xr-x permissions. Incorrect permissions allow for Dylib Hijacking. Guest account, other users and applications can exploit this vulnerability for privilege escalation. This issue affects Fast CAD Reader in possibly all versions since the vendor has not responded to our messages. The tested version was 4.1.5
Published: 2025-03-26T15:23:42.768Z
Updated: 2025-10-03T09:05:54.941Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.