cvedb.io
CVE-2021-43278
HIGH · CVSS 7.8
EPSS exploitation probability: 0%
Published 2021-11-14T21:15:08.133 · Last modified 2026-06-17T04:10:46.653

Summary

An Out-of-bounds Read vulnerability exists in the OBJ file reading procedure in Open Design Alliance Drawings SDK before 2022.11. The lack of validating the input length can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.

Affected products

opendesign — drawings_software_developemnt_kit

Does this affect you?

Add your gear to cvedb and we'll alert you only when opendesign ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.