An out-of-bounds write vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK prior to 2022.10. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
opendesign oda prc software development kit |
Vulmon