CVE-2018-18224: opendesign drawings_sdk Out-of-bounds Read
Vulnerability summary
CVE-2018-18224 is a high (CVSS 8.1) Out-of-bounds Read vulnerability in opendesign drawings_sdk. EPSS estimates a 2.16% chance of exploitation in the next 30 days, higher than 81.9% of scored vulnerabilities.
Timeline
- 19-10-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past the end, or before the beginning, of the intended buffer. This can allow attackers to obtain sensitive information from process memory or cause a crash.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
2.16%
Chance of exploitation in the next 30 days
Percentile
82%
Versus all other CVEs
30-day change
0.00 pp
From 2.16% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Opendesign1 product
- drawings_sdk2019:update1
Oracle1 product
- outside_in_technology8.5.3 | 8.5.4
2 vendors · 2 products
References
3 links- www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.htmlX Refsource CONFIRMVendor Advisory