CVE-2024-8894CWE-787

Out-of-bounds Write vulnerability in ODA SDK versions < 2025.10

High · published December 4, 2024

CVSS v4.0
8.1
EPSS
0%
Percentile
8.5
In the wild
Unconfirmed
What it is

Out-of-bounds Write vulnerability was discovered in Open Design Alliance Drawings SDK before 2025.10. Reading crafted DWF file and missing proper checks on received SectionIterator data can trigger an unhandled exception. This can allow attackers to cause a crash, potentially enabling a denial-of-service attack (Crash, Exit, or Restart) or possible code execution.

The record
Technical detail
CVSS v4.0
8.1 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:H/SC:N/SI:N/SA:H
EPSS
0.00193 · 8.5th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-12-04T11:40Z
EPSS history
Timeline
  • 04 DEC 11:40Z
    Out-of-bounds Write vulnerability in ODA SDK versions < 2025.10
    cvelistv5