Open Design Alliance
First CVE: Nov 7, 2023Active for: 3 years
5
CVEs Published
More CVEs Published than 15% of tracked CNAs
1.7
Avg CVEs / Year
More Avg CVEs / Year than 10% of tracked CNAs
7.5
Avg CVSS Score
Higher Avg CVSS Score than 70% of tracked CNAs
0.0%
In CISA KEV
Bottom 1%
Trends Over Time
The number and severity of CVEs published by Open Design Alliance over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 7, 2023
2 years ago
Most Recent CVE
Dec 22, 2025
214 days ago
Top CVEs
All CVEs published by Open Design Alliance as a CNA, regardless of affected vendor or product.
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-10021HIGH A Use of Uninitialized Variable vulnerability exists in Open Design Alliance Drawings SDK static versions (mt) before 2026.12. Static object `COdaMfcAppApp theApp` may access `OdSt | Dec 22, 2025 | 7.0 | 24 | NO | NO |
CVE-2023-5180HIGH An issue was discovered in Open Design Alliance
Drawings SDK before 2024.12. A corrupted value of number
of sectors used by the Fat structure in a crafted DGN file leads to an
out- | Dec 26, 2023 | 7.8 | 23 | NO | NO |
CVE-2024-8894HIGH Out-of-bounds Write vulnerability was discovered in Open Design Alliance Drawings SDK before 2025.10. Reading crafted DWF file and missing proper checks on received SectionIterator | Dec 4, 2024 | 8.1 | 22 | NO | NO |
CVE-2023-5179HIGH An issue was discovered in Open Design Alliance Drawings SDK before 2024.10. A corrupted value for the start of MiniFat sector in a crafted DGN file leads to an out-of-bounds read. | Nov 7, 2023 | 7.8 | 21 | NO | NO |
CVE-2024-12564MEDIUM Exposure of Sensitive Information to an Unauthorized Actor vulnerability was discovered in Open Design Alliance CDE inWEB SDK before 2025.3. Installing CDE Server with default sett | Dec 12, 2024 | 6.9 | 20 | NO | NO |
CVE Severity & Scoring
Severity distribution of CVEs published by this CNA5 CVEs
20%
80%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local4 (80.0%)
Network1 (20.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low5 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None2 (40.0%)
Unknown0 (0.0%)
Required2 (40.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None5 (100.0%)
Unknown0 (0.0%)
Exploit Exposure
Signals from CVEs in this cna scope (5 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
An overview of all social media posts that mention a CVE ID published by Open Design Alliance as a CNA.
Media Mentions
Media articles that mention a CVE ID published by Open Design Alliance as a CNA — matched by CVE ID, not by organization name.