CVE-2026-42479

Katalog CVE

CVSS 5.5 · Medium EPSS 0,13%

Kerentanan Out-of-bounds Read pada opencascade open cascade technology. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

An out-of-bounds read vulnerability in VrmlData_IndexedLineSet::TShape in the VRML parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of service via a crafted VRML file. The issue occurs because coordIndex values from parsed input are used as direct array indices without validation against the size of the coordinate array during geometry processing.

Rincian

Terbit di NVD

1 Mei 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,13% peluang dieksploitasi; lebih tinggi dari 2,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gist.github.com/sgInnora/dfba083d04906283e9c92aea78e2d94a advisory pihak ketiga