Opendesign Oda Prc Software Development Kit vulnerabilities
2 vulnerabilities
Known vulnerabilities in Opendesign Oda Prc Software Development Kit, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-43277opendesignoda_prc_software_development_kit
EPSS score0.84%
An out-of-bounds read vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process.CVE-2021-43279opendesignoda_prc_software_development_kitEPSS score1.34%
An out-of-bounds write vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process.