CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2022-23095

Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files. Unchecked input data from a crafted JPG file leads to memory corruption. An attacker can leverage this vulnerability to execute code in the context of the current process.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 69.8%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 6.8

References

https://www.opendesign.com/security-advisories
https://www.opendesign.com/security-advisories

Products affected by CVE-2022-23095

Opendesign » Drawings Software Development Kit » Version: 2021.11

cpe:2.3:a:opendesign:drawings_software_development_kit:2021.11
Opendesign » Drawings Software Development Kit » Version: 2021.12

cpe:2.3:a:opendesign:drawings_software_development_kit:2021.12

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-23095

Products

Pricing

Contact Us