Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2018-18224

A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past the end, or before the beginning, of the intended buffer. This can allow attackers to obtain sensitive information from process memory or cause a crash.

  • Published: Oct 20, 2018
  • Updated: Apr 13, 2023
  • CVE: CVE-2018-18224
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.1
  • AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

CVSS v2:

  • Severity: Medium
  • Score: 5.8
  • AV:N/AC:M/Au:N/C:P/I:N/A:P

CWEs:

Software From Fixed in
opendesign / drawings_sdk 2019-update1 2019-update1.x
oracle / outside_in_technology 8.5.3 8.5.3.x
oracle / outside_in_technology 8.5.4 8.5.4.x