CVE-2026-42477

The CVE describes a heap-based out-of-bounds read in Open CASCADE Technology (OCCT) v8_0_0_rc5 within the OBJ file parser. The vulnerability affects RWObj_Reader::read, caused by Standard_ReadLineBuffer::ReadLine() returning a 1-byte buffer for minimal OBJ lines and RWObj_Reader::read() calling p...

CVE-2026-42480

The Open CASCADE Technology (OCCT) version V8_0_0_rc5 is vulnerable to a stack-based out-of-bounds read in the VrmlData_Scene::ReadLine function of the VRML parser. The vulnerability arises because the quoted-string escape handler utilizes ptr[++anOffset] without adequate bounds checking, potenti...

CVE-2026-42481

Open CASCADE Technology (OCCT) version V8_0_0_rc5 is vulnerable to multiple issues within its IGES and STEP file parsers . These vulnerabilities can be triggered by processing crafted files and include an out-of-bounds read in Geom2d_BSplineCurve::EvalD0 during IGES B-spline curve evaluation, an ...

CVE-2026-42476

Two heap-based out-of-bounds read vulnerabilities affect Open CASCADE Technology (OCCT) V8_0_0_rc5 in the STL ASCII file parser (RWStl_Reader::ReadAscii). In CTL: buffers returned by Standard_ReadLineBuffer::ReadLine() are not properly length-validated before strncasecmp or direct byte access, en...

CVE-2026-42478

CVE-2026-42478 affects OCCT (Open CASCADE Technology) at V8_0_0_rc5, specifically VrmlData_IndexedFaceSet::TShape. A crafted VRML file can trigger a dereference of a corrupt or unvalidated pointer during shape construction in libTKDEVRML.so, allowing a denial-of-service. Documented impact: high s...

CVE-2026-42479

CVE-2026-42479 affects Open CASCADE Technology (OCCT) version V8_0_0_rc5. The VrmlData_IndexedLineSet::TShape in the VRML parser uses coordIndex values from input as direct array indices without validating against the coordinate array size during geometry processing, leading to an out-of-bounds r...