CVE-2021-44046

Name of the Vulnerable Software and Affected Versions: Open Design Alliance PRC SDK versions prior to 2022.11

Description: An out-of-bounds write issue exists when reading U3D files, caused by an unchecked return value of a function that verifies input data from a U3D file. This allows an attacker to execute code in the context of the current process.

Recommendations: For versions prior to 2022.11, update to a version 2022.11 or later to resolve the issue. As a temporary workaround, consider restricting the use of U3D file parsing functionality until a patch is available. Avoid using the vulnerable function that verifies input data from U3D files until the issue is resolved.