CVE-2025-8854

Stack-based buffer overflow in LoadOFF in bulletphysics bullet3 before 3.26 on all platforms allows remote attackers to execute arbitrary code via a crafted OFF file with an overlong initial token processed by the VHACD test utility or invoked indirectly through PyBullet's vhacd function...

CVE-2025-8854

The CVE-2025-8854 entry concerns bulletphysics bullet3 LoadOFF: a stack-based buffer overflow in the OFF parser. A crafted OFF file with an overlong initial token, processed by the VHACD test utility or via PyBullet’s vhacd function, can lead to remote code execution. Affected: bullet3 before ver...

PT-2025-32519 · Bullet3 +2 · Bullet3 +2

Name of the Vulnerable Software and Affected Versions: bulletphysics bullet3 versions prior to 3.26 Description: A stack-based buffer overflow exists in the LoadOFF function within bulletphysics bullet3. This issue allows remote attackers to execute arbitrary code by processing a crafted OFF file...