Описание
Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to improper validation of array index vulnerability during processing of H3D files. A DWORD value from a PoC file is extracted and used as an index to write to a buffer, leading to memory corruption.
Ссылки
- PatchThird Party AdvisoryUS Government Resource
- PatchThird Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 2021.1.0.27 (включая)
cpe:2.3:a:altair:hyperview_player:*:*:*:*:*:*:*:*
EPSS
Процентиль: 37%
0.00159
Низкий
7.8 High
CVSS3
Дефекты
CWE-129
Связанные уязвимости
CVSS3: 7.8
github
около 3 лет назад
Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to improper validation of array index vulnerability during processing of H3D files. A DWORD value from a PoC file is extracted and used as an index to write to a buffer, leading to memory corruption.
EPSS
Процентиль: 37%
0.00159
Низкий
7.8 High
CVSS3
Дефекты
CWE-129