Drawings Sdk
Vendor:
First CVE: Oct 19, 2018 · Active for 7 years
27
Total CVEs
More Total CVEs than 96% of tracked products
6.8
Avg CVEs / Year
Higher CVE frequency than 93% of tracked products
7.6
Avg CVSS
Higher Avg CVSS than 63% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Drawings Sdk over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 19, 2018
7 years ago
Most Recent CVE
Dec 26, 2023
945 days ago
CVE Severity & Scoring
Drawings Sdk27 CVEs
96%
All CVEs353,240 CVEs
45%
40%
11%
LowHigh
Attack Vector
Local25 (92.6%)
Network2 (7.4%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low27 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None0 (0.0%)
Unknown0 (0.0%)
Required27 (100.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None27 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (27 CVEs).
27 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-32952HIGH An out-of-bounds write issue exists in the DGN file-reading procedure in the Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper validation of user-supplied d | Jun 17, 2021 | 7.8 | 26 | NO | NO |
CVE-2021-32948HIGH An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-suppli | Jun 17, 2021 | 7.8 | 26 | NO | NO |
CVE-2021-32936HIGH An out-of-bounds write issue exists in the DXF file-recovering procedure in the Drawings SDK (All versions prior to 2022.4) resulting from the lack of proper validation of user-sup | Jun 17, 2021 | 7.8 | 26 | NO | NO |
CVE-2021-32946HIGH An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK (Version 2022.4 and prior) resulting from the lack of proper val | Jun 17, 2021 | 7.8 | 26 | NO | NO |
CVE-2018-18224HIGH A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past | Oct 19, 2018 | 8.1 | 26 | NO | NO |
CVE-2018-18223HIGH Open Design Alliance Drawings SDK 2019Update1 has a vulnerability during the reading of malformed files, allowing attackers to obtain sensitive information from process memory or c | Oct 19, 2018 | 8.1 | 26 | NO | NO |
CVE-2023-22670HIGH A heap-based buffer overflow exists in the DXF file reading procedure in Open Design Alliance Drawings SDK before 2023.6. The specific flaw exists within the parsing of DXF files. | Apr 15, 2023 | 7.8 | 25 | NO | NO |
CVE-2023-22669HIGH Parsing of DWG files in Open Design Alliance Drawings SDK before 2023.6 lacks proper validation of the length of user-supplied XRecord data prior to copying it to a fixed-length he | Apr 15, 2023 | 7.8 | 25 | NO | NO |
CVE-2021-44047HIGH A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing DWF/DWFX files. Cr | Dec 5, 2021 | 7.8 | 25 | NO | NO |
CVE-2021-44045HIGH An out-of-bounds write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN file | Dec 5, 2021 | 7.8 | 25 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (27 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (27 CVEs).
Media Mentions
Signals from CVEs in this product scope (27 CVEs).
Top CNAs Publishing CVEs For Drawings Sdk
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2019 | 2 | 8.1 | 2.2% | 0 | 0 |