CVE-2022-22538

When a user opens a manipulated Adobe Illustrator file format .ai, ai.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with...

CVE-2022-22538

SAP 3D Visual Enterprise Viewer 9.0 is affected by CVE-2022-22538 through AI file parsing. The vulnerability is an out-of-bounds/write condition in the AI parsing code that can allow remote code execution. Exploitation requires a user to open a malicious AI/.ai.x3d file (user interaction), potent...