CVE-2021-25176: opendesign drawings_software_development_kit NULL Pointer Dereference

EPSS trend

Probability

2.31%

Chance of exploitation in the next 30 days

Percentile

83%

Versus all other CVEs

30-day change

+0.03 pp

From 2.29% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.31%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

5 links

www.opendesign.com/security-advisoriesX Refsource MISCVendor Advisory
cert-portal.siemens.com/productcert/pdf/ssa-663999.pdfX Refsource CONFIRMPatchThird Party Advisory
www.zerodayinitiative.com/advisories/ZDI-21-221/X Refsource MISCThird Party AdvisoryVDB Entry
www.zerodayinitiative.com/advisories/ZDI-21-222/X Refsource MISCThird Party AdvisoryVDB Entry
cert-portal.siemens.com/productcert/pdf/ssa-155599.pdfX Refsource CONFIRMPatchThird Party Advisory

Related vulnerabilities

CVE-2013-4943siemenscomos0.43%13y ago09-08-2013 19:00The client application in Siemens COMOS before 9.1 Update 458, 9.2 before 9.2.0.6.37, and 10.0 before 10.0.3.0.19 allows local users to gain privileges and bypass intended database-operation restrictions by leveraging COMOS project access.CVE-2013-6840siemenscomos0.31%12y ago10-12-2013 15:00Siemens COMOS before 9.2.0.8.1, 10.0 before 10.0.3.1.40, and 10.1 before 10.1.0.0.2 allows local users to gain database privileges via unspecified vectors.CVE-2013-3927siemenscomos0.36%13y ago18-06-2013 18:45Unspecified vulnerability in the client library in Siemens COMOS 9.2 before 9.2.0.6.10 and 10.0 before 10.0.3.0.4 allows local users to obtain unintended write access to the database by leveraging read access.CVE-2021-31784opendesigndrawings_sdk+10.85%5y ago26-04-2021 18:03An out-of-bounds write vulnerability exists in the file-reading procedure in Open Design Alliance Drawings SDK before 2021.6 on all supported by ODA platforms in static configuration. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart) or possible code execution.CVE-2021-25174opendesigndrawings_software_development_kit+32.24%5y ago18-01-2021 07:14An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory corruption vulnerability exists when reading malformed DGN files. It can allow attackers to cause a crash, potentially enabling denial of service (Crash, Exit, or Restart).CVE-2021-25177opendesigndrawings_software_development_kit+32.31%5y ago18-01-2021 07:13An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart).

All vulnerabilities indrawings_software_development_kit comos jt2go teamcenter_visualization

CVE-2021-25176: opendesign drawings_software_development_kit NULL Pointer Dereference

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References