CVE-2021-43272

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An improper handling of exceptional conditions vulnerability exists in Open Design Alliance ODA Viewer sample before 2022.11. ODA Viewer continues to process invalid or malicious DWF files instead of stopping upon an exception. An attacker can leverage this vulnerability to execute code in the context of the current process.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-755

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://www.opendesign.com/security-advisoriesVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-1358/Third Party Advisory, VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-1360/Third Party Advisory, VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-1363/Third Party Advisory, VDB Entry
https://www.opendesign.com/security-advisoriesVendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-1358/Third Party Advisory, VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-1360/Third Party Advisory, VDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-1363/Third Party Advisory, VDB Entry

Timeline

Published: Nov 14, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-432733.3An Out-of-bounds Read vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.11. Crafted da CVE-2021-432747.8A Use After Free Vulnerability exists in the Open Design Alliance Drawings SDK before 2022.11. The specific flaw exists within the parsing o CVE-2021-432757.8A Use After Free vulnerability exists in the DGN file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The issue result CVE-2021-432767.8An Out-of-bounds Read vulnerability exists in Open Design Alliance ODA Viewer before 2022.8. Crafted data in a DWF file can trigger a read p CVE-2021-432777.8An out-of-bounds read vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in CVE-2021-432787.8An Out-of-bounds Read vulnerability exists in the OBJ file reading procedure in Open Design Alliance Drawings SDK before 2022.11. The lack o CVE-2021-432797.8An out-of-bounds write vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data i CVE-2021-43289.8A vulnerability has been found in 狮子鱼CMS and classified as critical. Affected by this vulnerability is the function goods_detail of the file CVE-2021-432807.8A stack-based buffer overflow vulnerability exists in the DWF file reading procedure in Open Design Alliance Drawings SDK before 2022.8. The CVE-2021-432817.2MyBB before 1.8.29 allows Remote Code Injection by an admin with the "Can manage settings?" permission. The Admin CP's Settings management m CVE-2021-432826.5An issue was discovered on Victure WR1200 devices through 1.0.3. The default Wi-Fi WPA2 key is advertised to anyone within Wi-Fi range throu CVE-2021-432838.8An issue was discovered on Victure WR1200 devices through 1.0.3. A command injection vulnerability was found within the web interface of the