Vulnerability · Published Nov 22, 2021 · Assigned by mitre
CVE-2021-43582
High 7.8
In plain English
A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 72% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)1.4%top 27.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A Use-After-Free Remote Vulnerability exists when reading a DWG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DWG files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process.
Affected products (as reported)
References
- https://www.opendesign.com/security-advisories x_refsource_MISC
- https://www.zerodayinitiative.com/advisories/ZDI-21-1353/ x_refsource_MISC