ODA Security Advisories

Vulnerabilities in the ODA Drawings Software Development Kit

Vulnerability Name	Description	Vulnerability Type	Affected Product Code Base	Attack Type	CVE Impact Other	Attack Vectors
CVE-2018-18223	Open Design Alliance Drawings SDK 2019Update1 has a vulnerability during the reading of malformed files, allowing attackers to obtain sensitive information from process memory or cause a crash.	Buffer Overflow	Drawings SDK - 2019Update1	Context-dependent	This can allow attackers to read sensitive information from other memory locations or cause a crash.	To exploit vulnerability broken drawing file should be opened.
CVE-2018-18224	A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past the end, or before the beginning, of the intended buffer. This can allow attackers to obtain sensitive information from process memory or cause a crash.	Buffer Overflow	Drawings SDK - 2019Update1	Context-dependent	This can allow attackers to read sensitive information from other memory locations or cause a crash.