CVE-2021-44046

An out-of-bounds write vulnerability exists when reading U3D files in Open Design Alliance PRC SDK before 2022.11

published December 5, 2021

CVSS
—
EPSS
1%
Percentile
57.5
In the wild
Unconfirmed
What it is

An out-of-bounds write vulnerability exists when reading U3D files in Open Design Alliance PRC SDK before 2022.11. An unchecked return value of a function (verifying input data from a U3D file) leads to an out-of-bounds write. An attacker can leverage this vulnerability to execute code in the context of the current process.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00840 · 57.5th percentile
Published
2021-12-05T20:30Z
EPSS history
Timeline
  • 05 DEC 20:30Z
    An out-of-bounds write vulnerability exists when reading U3D files in Open Design Alliance PRC SDK before 2022.11
    cvelistv5