CVE-2021-25175: Opendesign Drawings Software Development Kit

High severity, CVSS 7.8. EPSS: 2.6% chance of exploitation in the next 30 days.

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart).

Affected products

  • Opendesign Drawings Software Development Kit: before 2021.11 (fixed in 2021.11)
  • Siemens Comos: before 10.4.1 (fixed in 10.4.1)
  • Siemens JT2GO: before 13.1.0.1 (fixed in 13.1.0.1)
  • Siemens Teamcenter Visualization: before 13.1.0.1 (fixed in 13.1.0.1)

Published 2021-01-18. Last modified 2026-06-17.