CVE-2023-5180

An issue was discovered in Open Design Alliance Drawings SDK before 2024.12. A corrupted value of number of sectors used by the Fat structure in a crafted DGN file leads to an out-of-bounds write. An attacker can leverage this vulnerability to execute code in the context of the current process.

• CWE-787
• CWE-787

• https://www.opendesign.com/security-advisoriesVendor Advisory
• https://www.opendesign.com/security-advisoriesVendor Advisory

Published

Dec 26, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-51793Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d0…7.8
• CVE-2023-51794Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d0…7.8
• CVE-2023-51795Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d0…8
• CVE-2023-51796Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d0…3.6
• CVE-2023-51797Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d0…6.7
• CVE-2023-51798Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d0…7.8
• CVE-2023-51800Cross Site Scripting (XSS) vulnerability in School Fees Mana…5.4
• CVE-2023-51801SQL Injection vulnerability in the Simple Student Attendance…9.8
• CVE-2023-51802Cross Site Scripting (XSS) vulnerability in the Simple Stude…6.1
• CVE-2023-51803LinuxServer.io Heimdall before 2.5.7 does not prevent use of…9.8
• CVE-2023-51804An issue in rymcu forest v.0.02 allows a remote attacker to …7.5
• CVE-2023-51805SQL Injection vulnerability in TDuckCLoud tduck-platform v.4…6.5