CVE-2024-8894
Dec. 4, 2024, 12:15 p.m.
None
No Score
Description
Out-of-bounds Write vulnerability was discovered in Open Design Alliance Drawings SDK before 2025.10. Reading crafted DWF file and missing proper checks on received SectionIterator data can trigger an unhandled exception. This can allow attackers to cause a crash, potentially enabling a denial-of-service attack (Crash, Exit, or Restart) or possible code execution.
Product(s) Impacted
Product | Versions |
---|---|
Open Design Alliance Drawings SDK |
|
Weaknesses
Common security weaknesses mapped to this vulnerability.
CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.
Tags
Timeline
Published: Dec. 4, 2024, 12:15 p.m.
Last Modified: Dec. 4, 2024, 12:15 p.m.
Last Modified: Dec. 4, 2024, 12:15 p.m.
Status : Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
8a9629cb-c5e7-4d2a-a894-111e8039b7ea
*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.