CVE-2023-5180 HIGH

CVE-2023-5180: Out-of-bounds Write vulnerability exists in ODA Drawings SDK before 2024.12

Vendor Open Design Alliance
Product ODA Drawings SDK - All Versions < 2024.12
Weakness CWE-787
Published December 26, 2023
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

An issue was discovered in Open Design Alliance Drawings SDK before 2024.12. A corrupted value of number of sectors used by the Fat structure in a crafted DGN file leads to an out-of-bounds write. An attacker can leverage this vulnerability to execute code in the context of the current process.

Key dates

02Disclosure timeline

December 26, 2023 CVE published
August 2, 2024 Record updated