Vulnerabilities
Products Security index
Vulnerabilities
CVE-2026-42481
Out-of-Bounds Read and Infinite Recursion in OCCT IGES/STEP Parsers
CVE-2026-42476
Heap OOB Read in Open CASCADE STL ASCII Parser Causes DoS and Info Disclosure
CVE-2026-42478
Denial of Service via Crafted VRML File in Open CASCADE V8_0_0_rc5
CVE-2026-42479
Out‑of‑Bounds Read in Open CASCADE VRML Parser Causing Denial of Service
CVE-2026-42477
A heap-based out-of-bounds read vulnerability in RWObj_Reader::read in the OBJ file parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows user-assisted attackers to cause a denial of service or obtain sensitive information by persuading a victim to open a crafted OBJ file. The issue occurs because Standard_ReadLineBuffer::ReadLine() can return a 1-byte buffer for a minimal OBJ line, and RWObj_Reader::read() calls pushIndices(aLine + 2) without validating the buffer length.
