CVE-2021-43278

CVE-2021-43278 is an Out-of-bounds Read vulnerability in the OBJ file reading procedure of Open Design Alliance Drawings SDK versions prior to 2022.11. This flaw stems from insufficient input length validation, allowing a read past the end of an allocated buffer. With a CVSS score of 7.8 (High), this vulnerability can be exploited locally with low attack complexity, potentially leading to high confidentiality, integrity, and availability impacts, including arbitrary code execution. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.