Memory corruption

2022-12-1321:15:00

PRIOn knowledge base

www.prio-n.com

altair hyperview player

uninitialized memory vulnerability

h3d files

dword

stack variable

memory corruption

nvd

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.4%

JSON

Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized memory vulnerability during parsing of H3D files. A DWORD is extracted from an uninitialized buffer and, after sign extension, is used as an index into a stack variable to increment a counter leading to memory corruption.

CPENameOperatorVersion
hyperview_playerle2021.1.0.27

CPE	Name	Operator	Version
	hyperview_player	le	2021.1.0.27

References

www.cisa.gov/uscert/ics/advisories/icsa-22-284-01