ODA Security Advisories

Vulnerabilities in the ODA Drawings Software Development Kit

Vulnerability Name Description Vulnerability Type Affected Product Code Base Attack Type CVE Impact Other Attack Vectors
CVE-2018-18223 Open Design Alliance Drawings SDK 2019Update1 has a vulnerability during the reading of malformed files, allowing attackers to obtain sensitive information from process memory or cause a crash. Buffer Overflow Drawings SDK - 2019Update1 Context-dependent This can allow attackers to read sensitive information from other memory locations or cause a crash. To exploit vulnerability broken drawing file should be opened.
CVE-2018-18224 A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past the end, or before the beginning, of the intended buffer. This can allow attackers to obtain sensitive information from process memory or cause a crash. Buffer Overflow Drawings SDK - 2019Update1 Context-dependent This can allow attackers to read sensitive information from other memory locations or cause a crash.