PT-2022-19667
CVE-2022-2951
·
تاريخ النشر
2022-10-14
·
تاريخ التحديث
2022-12-19
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Altair HyperView Player versions 2021.1.0.27 and prior
Description
The issue arises from improper validation of array index during the processing of H3D files. A DWORD value extracted from a file is used as an index to write to a buffer, leading to memory corruption.
Recommendations
For versions 2021.1.0.27 and prior, update to a version later than 2021.1.0.27 to resolve the issue.
As a temporary workaround, consider restricting the processing of H3D files until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾