7.1
CVE-2026-42477
- EPSS 0.1%
- Veröffentlicht 01.05.2026 00:00:00
- Zuletzt bearbeitet 10.05.2026 14:16:50
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginA heap-based out-of-bounds read vulnerability in RWObj_Reader::read in the OBJ file parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows user-assisted attackers to cause a denial of service or obtain sensitive information by persuading a victim to open a crafted OBJ file. The issue occurs because Standard_ReadLineBuffer::ReadLine() can return a 1-byte buffer for a minimal OBJ line, and RWObj_Reader::read() calls pushIndices(aLine + 2) without validating the buffer length.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Opencascade ≫ Open Cascade Technology Version <= 7.9.3
Opencascade ≫ Open Cascade Technology Version8.0.0 Updatebeta1
Opencascade ≫ Open Cascade Technology Version8.0.0 Updaterc1
Opencascade ≫ Open Cascade Technology Version8.0.0 Updaterc2
Opencascade ≫ Open Cascade Technology Version8.0.0 Updaterc3
Opencascade ≫ Open Cascade Technology Version8.0.0 Updaterc4
Opencascade ≫ Open Cascade Technology Version8.0.0 Updaterc5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.1% | 0.012 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.1 | 1.8 | 5.2 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
CWE-122 Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
CWE-125 Out-of-bounds Read
The product reads data past the end, or before the beginning, of the intended buffer.
https://gist.github.com/sgInnora/dfba083d04906283e9c92aea78e2d94a