CVE-2021-25174: Opendesign Drawings Software Development Kit

High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days.

An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory corruption vulnerability exists when reading malformed DGN files. It can allow attackers to cause a crash, potentially enabling denial of service (Crash, Exit, or Restart).

Affected products

• Opendesign Drawings Software Development Kit: before 2021.12 (fixed in 2021.12)
• Siemens Comos: before 10.4.1 (fixed in 10.4.1)
• Siemens JT2GO: before 13.1.0.1 (fixed in 13.1.0.1)
• Siemens Teamcenter Visualization: before 13.1.0.1 (fixed in 13.1.0.1)

Published 2021-01-18. Last modified 2026-06-17.