CVE-2021-43276

HIGH 7.8CVE-2021-43276 · Published 14/11/2021 · updated 17/06/2026

In short

CVE-2021-43276 is a HIGH (CVSS 7.8) vulnerability affecting oda viewer (opendesign).
Chance of exploitation in the next 30 days (EPSS): 0.84%, higher than 57.9% of all vulnerabilities.
Fix: update to 2022.8 or later.

Package	Affected versions	Patched versions
oda viewer opendesign	`< 2022.8`	`2022.8`

Description

An Out-of-bounds Read vulnerability exists in Open Design Alliance ODA Viewer before 2022.8. Crafted data in a DWF file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process

References

opendesign.com/security-advisories · Vendor Advisory

More vulnerabilities in oda viewer

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free