Lucene search

MitreCVE-2022-28809

HistoryJul 17, 2022 - 11:15 p.m.

CVE-2022-28809

2022-07-1723:15:08

CWE-306

mitre

web.nvd.nist.gov

cve-2022-28809

open design alliance

drawings sdk

out-of-bounds read

code execution

dwg file

security vulnerability

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

28.5%

JSON

An issue was discovered in Open Design Alliance Drawings SDK before 2023.3. An Out-of-Bounds Read vulnerability exists when reading a DWG file with an invalid vertex number in a recovery mode. An attacker can leverage this vulnerability to execute code in the context of the current process.

Affected configurations

Nvd

Node

opendesigndrawings_sdkRange<2023.3

VendorProductVersionCPE
opendesigndrawings_sdk*cpe:2.3:a:opendesign:drawings_sdk:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
opendesign	drawings_sdk	*	cpe:2.3:a:opendesign:drawings_sdk::::::::

References

www.opendesign.com/security-advisories

Social References

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

28.5%

JSON

Related for CVE-2022-28809