CVE-2023-26495

7.8 highEPSS 0.4%

High (7.8) in opendesign drawings sdk. EPSS 0.4% chance of exploitation in the next 30 days.

An issue was discovered in Open Design Alliance Drawings SDK before 2024.1. A crafted DWG file can force the SDK to reuse an object that has been freed. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-416
Published: 2023-04-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

opendesign:drawings_sdk

References

https://www.opendesign.com/security-advisories
https://www.opendesign.com/security-advisories

Check your stack JSON