CVE-2021-43272

CRITICAL 9.8CVE-2021-43272 · Published 14/11/2021 · updated 17/06/2026

In short

CVE-2021-43272 is a CRITICAL (CVSS 9.8) vulnerability affecting oda viewer (opendesign).
Chance of exploitation in the next 30 days (EPSS): 3.6%, higher than 89.5% of all vulnerabilities.
Fix: update to 2022.11 or later.

Package	Affected versions	Patched versions
oda viewer opendesign	`< 2022.11`	`2022.11`

Description

An improper handling of exceptional conditions vulnerability exists in Open Design Alliance ODA Viewer sample before 2022.11. ODA Viewer continues to process invalid or malicious DWF files instead of stopping upon an exception. An attacker can leverage this vulnerability to execute code in the context of the current process.

References

opendesign.com/security-advisories · Vendor Advisory
zerodayinitiative.com/advisories/ZDI-21-1358 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-21-1360 · Third Party Advisory
zerodayinitiative.com/advisories/ZDI-21-1363 · Third Party Advisory

More vulnerabilities in oda viewer

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free