VDB
GSD-2023-22670
GSD-2023-22670
PUBLISHED
CVSS 7.800000190734863 HIGH
Record from circl · Published April 22, 2026
A heap-based buffer overflow exists in the DXF file reading procedure in Open Design Alliance Drawings SDK before 2023.6. The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of the length of user-supplied XRecord data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.
Risk scores
CVSS 3.1
7.800000190734863
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
Timeline
- Oct 5, 2023 PoC Published (2 in total, the first dated here)
- Apr 22, 2026 CVE Published
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GSD-2023-22670
vulnetix vdb fixes GSD-2023-22670Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GSD-2023-22670/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart