CVE-2026-42479

An out-of-bounds read vulnerability in VrmlData_IndexedLineSet::TShape in the VRML parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of service via a crafted VRML file. The issue occurs because coordIndex values from parsed input are used as direct array indices without validation against the size of the coordinate array during geometry processing.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://gist.github.com/sgInnora/dfba083d04906283e9c92aea78e2d94a	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:opencascade:open_cascade_technology::::::::
	cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:beta1::::::
	cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc1::::::
	cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc2::::::
	cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc3::::::
	cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc4::::::
	cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc5::::::

History

No history.

Information

Published : 2026-05-01 15:16

Updated : 2026-06-17 10:47

NVD link : CVE-2026-42479

Mitre link : CVE-2026-42479

CVE.ORG link : CVE-2026-42479

JSON object : View

Products Affected

opencascade

open_cascade_technology

CWE

CWE-125

Out-of-bounds Read

{"id": "CVE-2026-42479", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-42479", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-01T18:29:31.378820Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-05-01T15:16:43.967", "references": [{"url": "https://gist.github.com/sgInnora/dfba083d04906283e9c92aea78e2d94a", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-125"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "An out-of-bounds read vulnerability in VrmlData_IndexedLineSet::TShape in the VRML parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of service via a crafted VRML file. The issue occurs because coordIndex values from parsed input are used as direct array indices without validation against the size of the coordinate array during geometry processing."}], "lastModified": "2026-06-17T10:47:54.690", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:opencascade:open_cascade_technology:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "13B8FE30-EAE8-4F3E-8F5C-E81BD438FF6C", "versionEndIncluding": "7.9.3"}, {"criteria": "cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:beta1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B51DDC9-FDA5-4701-8CA3-5B589D72FA88"}, {"criteria": "cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "57733587-FB01-4201-8509-E81B6AE94AE3"}, {"criteria": "cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "86CF4B98-CCD3-4463-9A24-231128DDF85A"}, {"criteria": "cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F3987B9C-2448-4281-9A5C-FB6AF0336C3B"}, {"criteria": "cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "632D1594-AD1F-4F80-86F7-F8850F3574EC"}, {"criteria": "cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "267468E1-F54F-44AF-B74F-DFD29354243B"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}