Dashboard / CVE-2026-42479

CVE-2026-42479

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-05-01 Modified: 2026-11-08 First seen: 2026-11-08 Status: active

Attack Surface

Low Complexity No Auth

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: Required
S: Unchanged
C: None
I: None
A: High

Description

An out-of-bounds read vulnerability in VrmlData_IndexedLineSet::TShape in the VRML parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of service via a crafted VRML file. The issue occurs because coordIndex values from parsed input are used as direct array indices without validation against the size of the coordinate array during geometry processing.

Weakness Classification (1)

Affected Software (7)

VendorProductVersion
opencascade open_cascade_technology < 7.9.3
opencascade open_cascade_technology 8.0.0
opencascade open_cascade_technology 8.0.0
opencascade open_cascade_technology 8.0.0
opencascade open_cascade_technology 8.0.0
opencascade open_cascade_technology 8.0.0
opencascade open_cascade_technology 8.0.0

References & Advisories (1)

Bug Bounty Relevance

36 / 100
✓ No authentication
✓ Low complexity

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.10%
Raw Score 0.000990
Percentile 0.8%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00099
2026-11-12
0.00099
2026-11-10
0.00099
2026-11-09
0.00099
2026-11-08
0.00099

Intelligence Sources

nvd ref →

External Links