VYPR
← All advisories
Medium severity5.5NVD Advisory· Published May 1, 2026· Updated Jun 1, 2026

CVE-2026-42480

CVE-2026-42480

Description

A stack-based out-of-bounds read vulnerability in VrmlData_Scene::ReadLine in the VRML parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of service via a crafted VRML file. The issue occurs because the quoted-string escape handler uses ptr[++anOffset] without proper bounds checking, which can read past the end of a fixed-size stack buffer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Opencascade/Open Cascade Technology8 versions
    cpe:2.3:a:opencascade:open_cascade_technology:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:opencascade:open_cascade_technology:*:*:*:*:*:*:*:*range: <=7.9.3
    • cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:beta1:*:*:*:*:*:*
    • cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc3:*:*:*:*:*:*
    • cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc4:*:*:*:*:*:*
    • cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc5:*:*:*:*:*:*
    • (no CPE)range: =V8_0_0_rc5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.