https://vulnogram.org/ Most recent CVEs assigned by Open Design Alliance (oda). https://vulnogram.org/seaview/icons/oda.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2025-10021 https://vulnogram.org/CVE-2025-10021 A Use of Uninitialized Variable vulnerability exists in Open Design Alliance Drawings SDK static versions (mt) before 2026.12. Static object `COdaMfcAppApp theApp` may access `OdString::kEmpty` before its initialization. Due to undefined initializati… High Mon, 22 Dec 2025 15:48:07 GMT https://vulnogram.org/CVE-2024-12564 https://vulnogram.org/CVE-2024-12564 Exposure of Sensitive Information to an Unauthorized Actor vulnerability was discovered in Open Design Alliance CDE inWEB SDK before 2025.3. Installing CDE Server with default settings allows unauthorized users to visit prometheus metrics page. This… Medium Network Exploitable Thu, 12 Dec 2024 07:41:52 GMT https://vulnogram.org/CVE-2024-8894 https://vulnogram.org/CVE-2024-8894 Out-of-bounds Write vulnerability was discovered in Open Design Alliance Drawings SDK before 2025.10. Reading crafted DWF file and missing proper checks on received SectionIterator data can trigger an unhandled exception. This can allow attackers to… High Wed, 04 Dec 2024 11:40:22 GMT https://vulnogram.org/CVE-2023-5180 https://vulnogram.org/CVE-2023-5180 An issue was discovered in Open Design Alliance Drawings SDK before 2024.12. A corrupted value of number of sectors used by the Fat structure in a crafted DGN file leads to an out-of-bounds write. An attacker can leverage this vulnerability to execut… High Tue, 26 Dec 2023 08:35:37 GMT https://vulnogram.org/CVE-2023-5179 https://vulnogram.org/CVE-2023-5179 An issue was discovered in Open Design Alliance Drawings SDK before 2024.10. A corrupted value for the start of MiniFat sector in a crafted DGN file leads to an out-of-bounds read. This can allow attackers to cause a crash, potentially enabling a den… High Tue, 07 Nov 2023 15:16:22 GMT