CVE-2022-26106

When a user opens a manipulated Computer Graphics Metafile .cgm, CgmCore.dll received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2022-26106

When a user opens a manipulated Computer Graphics Metafile .cgm, CgmCore.dll received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

CVE-2022-26106

CVE-2022-26106 concerns SAP 3D Visual Enterprise Viewer v9.0. Connected sources describe a flaw in CGM file parsing (CgmCore.dll) that can trigger a memory error—specifically a write past the end of an allocated buffer—when processing manipulated CGM data from untrusted sources. ZDI advisories fu...