High severity7.8NVD Advisory· Published Dec 13, 2022· Updated Jun 17, 2026
CVE-2022-2949
CVE-2022-2949
Description
Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized memory vulnerability during parsing of H3D files. A DWORD is extracted from an uninitialized buffer and, after sign extension, is used as an index into a stack variable to increment a counter leading to memory corruption.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:altair:hyperview_player:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:altair:hyperview_player:*:*:*:*:*:*:*:*range: <=2021.1.0.27
- (no CPE)range: <=2021.1.0.27
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
1- www.cisa.gov/uscert/ics/advisories/icsa-22-284-01nvdPatchThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.