CVE-2021-43276

7.8 highEPSS 0.8%

High (7.8) in opendesign oda viewer. EPSS 0.8% chance of exploitation in the next 30 days.

An Out-of-bounds Read vulnerability exists in Open Design Alliance ODA Viewer before 2022.8. Crafted data in a DWF file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-125
Published: 2021-11-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

opendesign:oda_viewer

References

https://www.opendesign.com/security-advisories
https://www.opendesign.com/security-advisories

Check your stack JSON