CVE-2021-25178

概要

参考情報

• cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf · Patch
• cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf · Patch
• opendesign.com/security-advisories · Vendor Advisory
• zerodayinitiative.com/advisories/ZDI-21-220 · Third Party Advisory
• zerodayinitiative.com/advisories/ZDI-21-240 · Third Party Advisory
• zerodayinitiative.com/advisories/ZDI-21-243 · Third Party Advisory

drawings software development kit のその他の脆弱性

• CVE-2022-23095高 7.8Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files. Unchecked input data from a crafted JPG file leads t…
• CVE-2021-43391高 7.8An Out-of-Bounds Read vulnerability exists when reading a DXF file using Open Design Alliance Drawings SDK before 2022.11. The specific issu…
• CVE-2021-43390高 7.8An Out-of-Bounds Write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific iss…
• CVE-2021-43336高 7.8An Out-of-Bounds Write vulnerability exists when reading a DXF or DWG file using Open Design Alliance Drawings SDK before 2022.11. The speci…
• CVE-2021-43280高 7.8A stack-based buffer overflow vulnerability exists in the DWF file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The…