CVE-2022-28807

7.8 highEPSS 0.4%

High (7.8) in opendesign drawings sdk. EPSS 0.4% chance of exploitation in the next 30 days.

An issue was discovered in Open Design Alliance Drawings SDK before 2023.2. An Out-of-Bounds Read vulnerability exists when rendering a .dwg file after it's opened in the recovery mode. An attacker can leverage this vulnerability to execute code in the context of the current process.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWE: CWE-125
Published: 2022-07-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

opendesign:drawings_sdk

References

https://www.opendesign.com/security-advisories
https://www.opendesign.com/security-advisories

Check your stack JSON