Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rxxc-45j4-gcc4

Опубликовано: 04 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 8.1

Описание

Out-of-bounds Write vulnerability was discovered in Open Design Alliance Drawings SDK before 2025.10. Reading crafted DWF file and missing proper checks on received SectionIterator data can trigger an unhandled exception. This can allow attackers to cause a crash, potentially enabling a denial-of-service attack (Crash, Exit, or Restart) or possible code execution.

Out-of-bounds Write vulnerability was discovered in Open Design Alliance Drawings SDK before 2025.10. Reading crafted DWF file and missing proper checks on received SectionIterator data can trigger an unhandled exception. This can allow attackers to cause a crash, potentially enabling a denial-of-service attack (Crash, Exit, or Restart) or possible code execution.

EPSS

Процентиль: 16%
0.00052
Низкий

8.1 High

CVSS4

Дефекты

CWE-787

Связанные уязвимости

nvd
около 1 года назад

Out-of-bounds Write vulnerability was discovered in Open Design Alliance Drawings SDK before 2025.10. Reading crafted DWF file and missing proper checks on received SectionIterator data can trigger an unhandled exception. This can allow attackers to cause a crash, potentially enabling a denial-of-service attack (Crash, Exit, or Restart) or possible code execution.

CVSS3: 8.2
fstec
почти 2 года назад

Уязвимость набора средств разработки программного обеспечения для инженерных приложений Drawings SDK, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код или вызвать отказ в обслуживании

EPSS

Процентиль: 16%
0.00052
Низкий

8.1 High

CVSS4

Дефекты

CWE-787