Описание
An Out-of-bounds Read vulnerability exists in the OBJ file reading procedure in Open Design Alliance Drawings SDK before 2022.11. The lack of validating the input length can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2022.11 (исключая)
cpe:2.3:a:opendesign:drawings_software_developemnt_kit:*:*:*:*:*:*:*:*
EPSS
Процентиль: 61%
0.00414
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-125
Связанные уязвимости
github
больше 3 лет назад
An Out-of-bounds Read vulnerability exists in the OBJ file reading procedure in Open Design Alliance Drawings SDK before 2022.11. The lack of validating the input length can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
EPSS
Процентиль: 61%
0.00414
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-125