CVE-2021-31784: Opendesign Drawings SDK

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

An out-of-bounds write vulnerability exists in the file-reading procedure in Open Design Alliance Drawings SDK before 2021.6 on all supported by ODA platforms in static configuration. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart) or possible code execution.

Affected products

  • Opendesign Drawings SDK: before 2021.6 (fixed in 2021.6)
  • Siemens Comos: before 10.4.1 (fixed in 10.4.1)

Published 2021-04-26. Last modified 2026-06-17.