CVE-2022-28809

An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists when reading a DWG file with an invalid vertex number in a recovery mode. An attacker can leverage this vulnerability to execute code in the context of the current process.

Score

CVSS 3.1 7.8 High

Status

Modified - cve@mitre.org

Published

2022-07-17

Last modified

2024-08-03

Weaknesses

CWE-306

Affected products

• Drawings Sdk (Opendesign)

References

• https://www.opendesign.com/security-advisories