CVE-2021-43273

LOW

Open Design Alliance Drawings SDK <2022.11 - Memory Corruption

Title source: llm
STIX 2.1

Description

An Out-of-bounds Read vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.11. Crafted data in a DGN file and lack of verification of input data can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.

References (5)

Core 5
Core References
Vendor Advisory x_refsource_misc
https://www.opendesign.com/security-advisories
Third Party Advisory, VDB Entry x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-21-1281/
Third Party Advisory, VDB Entry x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-21-1291/
Third Party Advisory, VDB Entry x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-21-1357/
Third Party Advisory, VDB Entry x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-21-1351/

Scores

CVSS v3 3.3
EPSS 0.0028
EPSS Percentile 51.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Details

CWE
CWE-125
Status published
Products (1)
opendesign/drawings_sdk < 2022.11
Published Nov 14, 2021
Tracked Since Feb 18, 2026