Opendesign maintains a narrowly scoped portfolio of CAD drawing libraries and viewers, including its Drawings SDK and ODA Viewer product family, that serve as critical components in engineering and design workflows where compatibility with proprietary formats is essential. The vendor's vulnerability exposure concentrates in memory-safety and resource-handling weaknesses across these libraries: out-of-bounds reads and writes, use-after-free conditions, type-confusion flaws, and unbounded resource allocation that are characteristic of complex file-parsing codebases handling untrusted drawing formats. Although the product portfolio is small, these libraries achieve prominence through deep embedding in downstream CAD applications and engineering platforms, amplifying the significance of each disclosure. Defenders working with CAD ecosystems should monitor this vendor's advisories and coordinate updates across dependent applications; current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Opendesign over time
Signals from CVEs in this vendor scope (49 CVEs).
49 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-43272CRITICAL An improper handling of exceptional conditions vulnerability exists in Open Design Alliance ODA Viewer sample before 2022.11. ODA Viewer continues to process invalid or malicious D | Nov 14, 2021 | 9.8 | 31 | NO | NO |
CVE-2021-25178HIGH An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability exists when the recover operation is run with malformed .DX | Jan 18, 2021 | 7.8 | 27 | NO | NO |
CVE-2022-23095HIGH Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files. Unchecked input data from a crafted JPG file leads to memory corruption. An attacker can lev | Jan 15, 2022 | 7.8 | 26 | NO | NO |
CVE-2021-43581HIGH An Out-of-Bounds Read vulnerability exists when reading a U3D file using Open Design Alliance PRC SDK before 2022.11. The specific issue exists within the parsing of U3D files. Inc | Nov 22, 2021 | 8.8 | 26 | NO | NO |
CVE-2021-43391HIGH An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF files | Nov 14, 2021 | 7.8 | 26 | NO | NO |
CVE-2021-43390HIGH An Out-of-Bounds Write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN file | Nov 14, 2021 | 7.8 | 26 | NO | NO |
CVE-2021-43336HIGH An Out-of-Bounds Write vulnerability exists when reading a DXF or DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of D | Nov 14, 2021 | 7.8 | 26 | NO | NO |
CVE-2021-43280HIGH A stack-based buffer overflow vulnerability exists in the DWF file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of proper v | Nov 14, 2021 | 7.8 | 26 | NO | NO |
CVE-2021-43279HIGH An out-of-bounds write vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can trigger a write past th | Nov 14, 2021 | 7.8 | 26 | NO | NO |
CVE-2021-32952HIGH An out-of-bounds write issue exists in the DGN file-reading procedure in the Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper validation of user-supplied d | Jun 17, 2021 | 7.8 | 26 | NO | NO |
Signals from CVEs in this vendor scope (49 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Opendesign.
Media articles that mention a CVE ID that affects a product developed by Opendesign — matched by CVE ID, not by vendor name.