CVE-2021-31508: high-severity vulnerability in OpenText Brava! Desktop
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
OpenText Brava! Desktop has a flaw in how it reads DXF files that allows attackers to run malicious code if you open a specially crafted file. The program doesn't properly check the file data before processing it, leading to memory corruption.
A buffer overflow vulnerability in OpenText Brava! Desktop 16.6.3.84's DXF file parser results from insufficient input validation on user-supplied data, allowing an attacker to write past allocated buffer boundaries and achieve arbitrary code execution in the application's process context. User interaction is required; exploitation occurs through malicious DXF files or web-based delivery mechanisms.
In the same product, most dangerous first.