CVE-2021-43276

CVE-2021-43276 is an Out-of-bounds Read vulnerability affecting Open Design Alliance ODA Viewer versions prior to 2022.8. An attacker can exploit this by crafting a malicious DWF file, leading to a read past the end of an allocated buffer. This vulnerability has a CVSS score of 7.8 (High), indicating a high potential for impact, including arbitrary code execution when chained with other vulnerabilities, requiring user interaction to open the malicious file. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.