8.1
CVE-2018-18224
- EPSS 1.01%
- Published 19.10.2018 22:29:01
- Last modified 21.11.2024 03:55:33
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past the end, or before the beginning, of the intended buffer. This can allow attackers to obtain sensitive information from process memory or cause a crash.
Data is provided by the National Vulnerability Database (NVD)
Opendesign ≫ Drawings Sdk Version2019 Updateupdate1
Oracle ≫ Outside In Technology Version8.5.3
Oracle ≫ Outside In Technology Version8.5.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.01% | 0.764 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 8.1 | 2.8 | 5.2 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
|
| nvd@nist.gov | 5.8 | 8.6 | 4.9 |
AV:N/AC:M/Au:N/C:P/I:N/A:P
|
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.