CVE-2022-28807

An issue was discovered in Open Design Alliance Drawings SDK before 2023.2. An Out-of-Bounds Read vulnerability exists when rendering a .dwg file after it's opened in the recovery mode. An attacker can leverage this vulnerability to execute code in the context of the current process.

• CWE-125

• https://www.opendesign.com/security-advisoriesVendor Advisory
• https://www.opendesign.com/security-advisoriesVendor Advisory

Published

Jul 17, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-28799The TikTok application before 23.7.3 for Android allows acco…8.8
• CVE-2022-2880Requests forwarded by ReverseProxy include the raw query par…7.5
• CVE-2022-28802Code by Zapier before 2022-08-17 allowed intra-account privi…9.9
• CVE-2022-28803In SilverStripe Framework through 2022-04-07, Stored XSS can…5.4
• CVE-2022-28805singlevar in lparser.c in Lua from (including) 5.4.0 up to (…9.1
• CVE-2022-28806An issue was discovered on certain Fujitsu LIEFBOOK devices …7.8
• CVE-2022-28808An issue was discovered in Open Design Alliance Drawings SDK…7.8
• CVE-2022-28809An issue was discovered in Open Design Alliance Drawings SDK…7.8
• CVE-2022-2881The underlying bug might cause read past end of the buffer a…8.2
• CVE-2022-28810Zoho ManageEngine ADSelfService Plus before build 6122 allow…6.8
• CVE-2022-28811In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Par…9.8
• CVE-2022-28812In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Par…9.8