Drawings Software Development Kit
Vendor:
First CVE: Jan 18, 2021 · Active for 5 years
13
Total CVEs
More Total CVEs than 91% of tracked products
6.5
Avg CVEs / Year
Higher CVE frequency than 91% of tracked products
7.8
Avg CVSS
Higher Avg CVSS than 63% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Drawings Software Development Kit over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 18, 2021
5 years ago
Most Recent CVE
Jan 15, 2022
1,652 days ago
CVE Severity & Scoring
Drawings Software Development Kit13 CVEs
100%
All CVEs352,708 CVEs
45%
40%
11%
High
Attack Vector
Local13 (100.0%)
Network0 (0.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low13 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None0 (0.0%)
Unknown0 (0.0%)
Required13 (100.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None13 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-25178HIGH An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability exists when the recover operation is run with malformed .DX | Jan 18, 2021 | 7.8 | 27 | NO | NO |
CVE-2022-23095HIGH Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files. Unchecked input data from a crafted JPG file leads to memory corruption. An attacker can lev | Jan 15, 2022 | 7.8 | 26 | NO | NO |
CVE-2021-43391HIGH An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DXF files | Nov 14, 2021 | 7.8 | 26 | NO | NO |
CVE-2021-43390HIGH An Out-of-Bounds Write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN file | Nov 14, 2021 | 7.8 | 26 | NO | NO |
CVE-2021-43336HIGH An Out-of-Bounds Write vulnerability exists when reading a DXF or DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of D | Nov 14, 2021 | 7.8 | 26 | NO | NO |
CVE-2021-43280HIGH A stack-based buffer overflow vulnerability exists in the DWF file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue results from the lack of proper v | Nov 14, 2021 | 7.8 | 26 | NO | NO |
CVE-2021-25177HIGH An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to | Jan 18, 2021 | 7.8 | 26 | NO | NO |
CVE-2021-25176HIGH An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when rendering malformed .DXF and .DWG files. This can allow attacker | Jan 18, 2021 | 7.8 | 26 | NO | NO |
CVE-2021-25175HIGH An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers t | Jan 18, 2021 | 7.8 | 26 | NO | NO |
CVE-2021-25174HIGH An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory corruption vulnerability exists when reading malformed DGN files. It can allow attackers to ca | Jan 18, 2021 | 7.8 | 26 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (13 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (13 CVEs).
Media Mentions
Signals from CVEs in this product scope (13 CVEs).
Top CNAs Publishing CVEs For Drawings Software Development Kit
Top CWEs
Versions
No cataloged versions.