CVE-2021-44422

An Improper Input Validation Vulnerability exists when reading a BMP file using Open Design Alliance Drawings SDK before 2022.12. Crafted data in a BMP file can trigger a write operation past the end of an allocated buffer, or lead to a heap-based buffer overflow. An attacker can leverage this vulnerability to execute code in the context of the current process.

• CWE-20
• CWE-787

• https://www.opendesign.com/security-advisoriesVendor Advisory
• https://www.opendesign.com/security-advisoriesVendor Advisory

Published

Dec 21, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-44417A denial of service vulnerability exists in the cgiserver.cg…7.7
• CVE-2021-44418A denial of service vulnerability exists in the cgiserver.cg…7.7
• CVE-2021-44419A denial of service vulnerability exists in the cgiserver.cg…7.7
• CVE-2021-4442In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2021-44420In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 befo…7.3
• CVE-2021-44421The pointer-validation logic in util/mem_util.rs in Occlum b…5.5
• CVE-2021-44423An out-of-bounds read vulnerability exists when reading a BM…7.8
• CVE-2021-44425An issue was discovered in AnyDesk before 6.2.6 and 6.3.x be…6.5
• CVE-2021-44426An issue was discovered in AnyDesk before 6.2.6 and 6.3.x be…8.8
• CVE-2021-44427An unauthenticated SQL Injection vulnerability in Rosario St…9.8
• CVE-2021-44428Pinkie 2.15 allows remote attackers to cause a denial of ser…7.5
• CVE-2021-44429Serva 4.4.0 allows remote attackers to cause a denial of ser…7.5