PT-2023-31893
CVE-2023-5179
·
Published
2023-11-07
·
Updated
2023-11-14
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Open Design Alliance Drawings SDK versions prior to 2024.10
Description
An issue in the Open Design Alliance Drawings SDK allows attackers to cause a crash or potentially enable code execution through a denial-of-service attack. This occurs when a corrupted value for the start of a MiniFat sector in a crafted DGN file leads to an out-of-bounds read.
Recommendations
For versions prior to 2024.10, update to version 2024.10 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾