What’s Vulnerable › Vulnerabilities
CVE-2023-26495
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2023-04-10 · updated 2026-06-17
- Weakness: CWE-416
Description
An issue was discovered in Open Design Alliance Drawings SDK before 2024.1. A crafted DWG file can force the SDK to reuse an object that has been freed. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code.
Affected products
- Open Design Alliance ODA Drawings SDK - All Versions < 2024.12: before 2024.1 — fixed in 2024.1
How to fix
Upgrade to a fixed version: Open Design Alliance ODA Drawings SDK - All Versions < 2024.12 2024.1. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2023-26495 or the next vulnerability affects your stack