CVE-2021-44423

Name of the Vulnerable Software and Affected Versions: Open Design Alliance (ODA) Drawings Explorer versions prior to 2022.12

Description: An out-of-bounds read issue exists when reading a BMP file using Open Design Alliance (ODA) Drawings Explorer. The specific issue occurs after loading BMP files, where unchecked input data from a crafted BMP file leads to an out-of-bounds read. An attacker can leverage this issue to execute code in the context of the current process.

Recommendations: For versions prior to 2022.12, update to a version 2022.12 or later to resolve the issue. As a temporary workaround, consider restricting the use of BMP files in Open Design Alliance (ODA) Drawings Explorer until a patch is available. Avoid using the BMP file parsing functionality in the affected software until the issue is resolved.