NMR function vulnerability :: COpcPackageReader :: releaseZIP() function from the 3MF Consortium’s lib3mf library, allowing a hacker to execute arbitrary code.

The vulnerability of the NMR function: COpcPackageReader::releaseZIP in the 3MF Consortium’s library is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created 3MF file...