Open Design Alliance vulnerabilities
We track 4 vulnerabilities in Open Design Alliance products across 4 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on December 22, 2025.
Latest Open Design Alliance vulnerabilities
- 7.0 High severity
ODA Drawings SDK - All Versions < 2026.12: Use of Uninitialized Variable
A Use of Uninitialized Variable vulnerability exists in Open Design Alliance Drawings SDK static versions (mt) before 2026.12. Static object `COdaMfcAppApp theApp` may access `OdString::kEmpty` before its initialization. Due to undefined initialization order o
- 8.1 High severity
ODA Drawings SDK - All Versions < 2025.10: Out-of-bounds Write
Out-of-bounds Write vulnerability was discovered in Open Design Alliance Drawings SDK before 2025.10. Reading crafted DWF file and missing proper checks on received SectionIterator data can trigger an unhandled exception. This can allow attackers to cause a cr
- 7.8 High severity
ODA Drawings SDK - All Versions < 2024.12: Out-of-bounds Write
An issue was discovered in Open Design Alliance Drawings SDK before 2024.12. A corrupted value of number of sectors used by the Fat structure in a crafted DGN file leads to an out-of-bounds write. An attacker can leverage this vulnerability to execute code in
- 7.8 High severity
ODA Drawings SDK - All Versions < 2024.10: Out-of-bounds Read
An issue was discovered in Open Design Alliance Drawings SDK before 2024.10. A corrupted value for the start of MiniFat sector in a crafted DGN file leads to an out-of-bounds read. This can allow attackers to cause a crash, potentially enabling a denial-of-ser