Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-5179

An issue was discovered in Open Design Alliance Drawings SDK before 2024.10. A corrupted value for the start of MiniFat sector in a crafted DGN file leads to an out-of-bounds read.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ODA

Description

An issue was discovered in Open Design Alliance Drawings SDK before 2024.10. A corrupted value for the start of MiniFat sector in a crafted DGN file leads to an out-of-bounds read. This can allow attackers to cause a crash, potentially enabling a denial-of-service attack (Crash, Exit, or Restart) or possible code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Open Design Alliance ODA Drawings SDK - All Versions < 2024.10

Default version status: unaffected

  • 0 to < 2024.10affected

References