What is CVE-2023-26495?

CVE-2023-26495 is a high-severity vulnerability in Opendesign Drawings Sdk, classified under Use After Free. CVSS score: 7.8/10. Published 2023-04-10.

How severe is CVE-2023-26495?

High severity. CVSS v3 base score is 7.8 out of 10.

Use After Free in Opendesign Drawings Sdk

CVE-2023-26495

An issue was discovered in Open Design Alliance Drawings SDK before 2024.1. A crafted DWG file can force the SDK to reuse an object that has been freed. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code.

Vulnerability class: Use-After-Free

EPSS: 0.004 (36.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Opendesign Drawings_sdk
N/a — versions n/a

Weakness classification (CWE)

CWE-416 — Use After Free

References

cve@mitre.org (Vendor Advisory)

Frequently asked questions

What is CVE-2023-26495?: CVE-2023-26495 is a high-severity vulnerability in Opendesign Drawings Sdk, classified under Use After Free. CVSS score: 7.8/10. Published 2023-04-10.
How severe is CVE-2023-26495?: High severity. CVSS v3 base score is 7.8 out of 10.