# CVEs published 2021-12-05

6 CVEs were published on December 5, 2021: 0 critical, 0 high. Days are UTC.

- [CVE-2021-44048](https://cve.now/CVE-2021-44048.md): An out-of-bounds write vulnerability exists when reading a TIF file using Open Design Alliance (ODA) Drawings Explorer before 2022.11. (no CVSS)
- [CVE-2021-44047](https://cve.now/CVE-2021-44047.md): A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.11. (no CVSS)
- [CVE-2021-44046](https://cve.now/CVE-2021-44046.md): An out-of-bounds write vulnerability exists when reading U3D files in Open Design Alliance PRC SDK before 2022.11. (no CVSS)
- [CVE-2021-44045](https://cve.now/CVE-2021-44045.md): An out-of-bounds write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. (no CVSS)
- [CVE-2021-44044](https://cve.now/CVE-2021-44044.md): An out-of-bounds write vulnerability exists when reading a JPG file using Open Design Alliance Drawings SDK before 2022.11. (no CVSS)
- [CVE-2021-37253](https://cve.now/CVE-2021-37253.md): M-Files Web before 20.10.9524.1 allows a denial of service via overlapping ranges (in HTTP requests with crafted Range or Request-Range head (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-12-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.