CVE-2023-22669

HIGH · CVSS 7.8 EPSS 0.32%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-04-15 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2023-22669

Severity

HIGH

CVSS

7.8

EPSS

0.32%

Original NVD Description

Parsing of DWG files in Open Design Alliance Drawings SDK before 2023.6 lacks proper validation of the length of user-supplied XRecord data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.