CVE-2022-23095

No fix known EPSS 1%CVSS 7.8

Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files. Unchecked input data from a crafted JPG file leads to memory corruption. An attacker can leverage this vulnerability to execute code in the context of the current process.

Published 2022-01-15 · CVE record · OSV

Products: opendesign drawings_software_development_kit