CVE-2018-18224

A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past the end, or before the beginning, of the intended buffer. This can allow attackers to obtain sensitive information from process memory or cause a crash.

Score

CVSS 3.0 8.1 High

Status

Modified - cve@mitre.org

Published

2018-10-19

Last modified

2024-08-05

Weaknesses

CWE-125

Affected products

• Drawings Sdk (Opendesign)
• Outside In Technology (Oracle)

References

• http://www.securityfocus.com/bid/105603
• https://www.opendesign.com/security-advisories
• https://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html