CVE-2021-25173: Opendesign Drawings Software Development Kit

High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days.

An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory allocation with excessive size vulnerability exists when reading malformed DGN files, which allows attackers to cause a crash, potentially enabling denial of service (crash, exit, or restart).

Affected products

• Opendesign Drawings Software Development Kit: before 2021.12 (fixed in 2021.12)
• Siemens Comos: before 10.4.1 (fixed in 10.4.1)
• Siemens JT2GO: before 13.1.0.1 (fixed in 13.1.0.1)
• Siemens Teamcenter Visualization: before 13.1.0.1 (fixed in 13.1.0.1)

Published 2021-01-18. Last modified 2026-06-17.