ODA: CVE Program partner

CVEs, 365 days15 all time, 0 rejected

Quality100%median 99%

CVSS by the CNA100%share of records

CWE100%share of records

Affected versions100%not n/a or unspecified

CVSS added by CISA0%lower is better

Organisation	Open Design Alliance
Role	CNA
Type	Vendor
Reports to	mitre
Scope	Open Design Alliance products only.
Advisories	https://www.opendesign.com/security-advisories

CVE-2025-10021 2025-12-22 · CVSS 7.0
A Use of Uninitialized Variable vulnerability exists in Open Design Alliance Drawings SDK static versions (mt) before 2026.12. Static object `COdaMfcAppApp theA
CVE-2024-12564 2024-12-12 · CVSS 6.9
Exposure of Sensitive Information to an Unauthorized Actor vulnerability was discovered in Open Design Alliance CDE inWEB SDK before 2025.3. Installing CDE Serv
CVE-2024-8894 2024-12-04 · CVSS 8.1
Out-of-bounds Write vulnerability was discovered in Open Design Alliance Drawings SDK before 2025.10. Reading crafted DWF file and missing proper checks on rece
CVE-2023-5180 2023-12-26 · CVSS 7.8
An issue was discovered in Open Design Alliance Drawings SDK before 2024.12. A corrupted value of number of sectors used by the Fat structure in a crafted DGN f
CVE-2023-5179 2023-11-07 · CVSS 7.8
An issue was discovered in Open Design Alliance Drawings SDK before 2024.10. A corrupted value for the start of MiniFat sector in a crafted DGN file leads to an

ODA