CVE-2018-18224 Information disclosure in n/a

High 8.1 Published 19 Oct 2018 Updated 5 Aug 2024

Attackers can read out-of-bounds memory or crash the application via a buffer over-read in the Open Design Alliance Drawings SDK on non-Windows platforms.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2018-18224?

CVE-2018-18224 is a high-severity vulnerability in Oracle Outside in Technology, published on 19 Oct 2018. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

A vulnerability exists in the file reading procedure in Open Design Alliance Drawings SDK 2019Update1 on non-Windows platforms in which attackers could perform read operations past the end, or before the beginning, of the intended buffer. This can allow attackers to obtain sensitive information from process memory or cause a crash.

Weakness: CWE-125

Which versions are affected by CVE-2018-18224?

It affects 2 products.

Products include Opendesign Drawings Sdk, Oracle Outside in Technology.

How do I fix CVE-2018-18224?

No fix has been published for CVE-2018-18224 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-18224 being exploited?

There is no known exploitation of CVE-2018-18224 in the wild and no public exploit code.

All Oracle Outside in Technology vulnerabilities

Sources

Also known as GHSA-vwpw-6vc6-37gq.