Описание
An out-of-bounds write vulnerability exists when reading U3D files in Open Design Alliance PRC SDK before 2022.11. An unchecked return value of a function (verifying input data from a U3D file) leads to an out-of-bounds write. An attacker can leverage this vulnerability to execute code in the context of the current process.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2022.11 (исключая)
cpe:2.3:a:opendesign:prc_sdk:*:*:*:*:*:*:*:*
EPSS
Процентиль: 53%
0.00307
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-787
Связанные уязвимости
github
около 4 лет назад
An out-of-bounds write vulnerability exists when reading U3D files in Open Design Alliance PRC SDK before 2022.11. An unchecked return value of a function (verifying input data from a U3D file) leads to an out-of-bounds write. An attacker can leverage this vulnerability to execute code in the context of the current process.
EPSS
Процентиль: 53%
0.00307
Низкий
7.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
CWE-787