CVE-2021-25178: Opendesign Drawings Software Development Kit

High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days.

An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability exists when the recover operation is run with malformed .DXF and .DWG files. This can allow attackers to cause a crash potentially enabling a denial of service attack (Crash, Exit, or Restart) or possible code execution.

Affected products

• Opendesign Drawings Software Development Kit: before 2021.11 (fixed in 2021.11)
• Siemens Comos: before 10.4.1 (fixed in 10.4.1)
• Siemens JT2GO: before 13.1.0.1 (fixed in 13.1.0.1)
• Siemens Teamcenter Visualization: before 13.1.0.1 (fixed in 13.1.0.1)

Published 2021-01-18. Last modified 2026-06-17.