CVE-2023-0973CWE-476

Step Tools Third-Party

Low · published March 13, 2023

CVSS v3.1
2.2
EPSS
0%
Percentile
5.6
In the wild
Unconfirmed
What it is

STEPTools v18SP1 ifcmesh library (v18.1) is affected due to a null pointer dereference, which could allow an attacker to deny application usage when reading a specially constructed file, resulting in an application crash.

The record
Technical detail
CVSS v3.1
2.2 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00166 · 5.6th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2023-03-13T17:06Z
EPSS history
Timeline
  • 13 MAR 17:06Z
    Step Tools Third-Party
    cvelistv5