Description
A heap-based out-of-bounds read vulnerability in RWObj_Reader::read in the OBJ file parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows user-assisted attackers to cause a denial of service or obtain sensitive information by persuading a victim to open a crafted OBJ file. The issue occurs because Standard_ReadLineBuffer::ReadLine() can return a 1-byte buffer for a minimal OBJ line, and RWObj_Reader::read() calls pushIndices(aLine + 2) without validating the buffer length.
INFO
Published Date :
2026-05-01T00:00:00.000Z
Last Modified :
2026-05-01T18:32:07.533Z
Source :
mitre
AFFECTED PRODUCTS
The following products are affected by CVE-2026-42477 vulnerability.
| Vendors | Products |
|---|---|
| Opencascade |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2026-42477.
