Read the docs
TI-2026-30763 Aliases CVE-2026-42479GHSA-2wfq-x8g9-pm2c

An out-of-bounds read vulnerability in VrmlData_IndexedLineSet::TShape in the VRML parser…

Priority LOW 24CWE-125Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-125 and the CVSS impact.

Summary

An out-of-bounds read vulnerability in VrmlData_IndexedLineSet::TShape in the VRML parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of service via a crafted VRML file. The issue occurs because coordIndex values from parsed input are used as direct array indices without validation against the size of the coordinate array during geometry processing.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00099 0th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 7

CPEVersionsRoleVendor
cpe:2.3:a:opencascade:open_cascade_technology:*:*:*:*:*:*:*:*up to 7.9.3VulnerableOpencascade
cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:beta1:*:*:*:*:*:*8.0.0 beta1VulnerableOpencascade
cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc1:*:*:*:*:*:*8.0.0 rc1VulnerableOpencascade
cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc2:*:*:*:*:*:*8.0.0 rc2VulnerableOpencascade
cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc3:*:*:*:*:*:*8.0.0 rc3VulnerableOpencascade
cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc4:*:*:*:*:*:*8.0.0 rc4VulnerableOpencascade
cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc5:*:*:*:*:*:*8.0.0 rc5VulnerableOpencascade
  • cpe:2.3:a:opencascade:open_cascade_technology:*:*:*:*:*:*:*:* Versions up to 7.9.3 Vulnerable ·Opencascade
  • cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:beta1:*:*:*:*:*:* Versions 8.0.0 beta1 Vulnerable ·Opencascade
  • cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc1:*:*:*:*:*:* Versions 8.0.0 rc1 Vulnerable ·Opencascade
  • cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc2:*:*:*:*:*:* Versions 8.0.0 rc2 Vulnerable ·Opencascade
  • cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc3:*:*:*:*:*:* Versions 8.0.0 rc3 Vulnerable ·Opencascade
  • cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc4:*:*:*:*:*:* Versions 8.0.0 rc4 Vulnerable ·Opencascade
  • cpe:2.3:a:opencascade:open_cascade_technology:8.0.0:rc5:*:*:*:*:*:* Versions 8.0.0 rc5 Vulnerable ·Opencascade

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-42479
  2. 2026-10-03 Alias added: GHSA-2wfq-x8g9-pm2c

References

Advisory 1

  • TI-2026-30762 An issue was discovered in VrmlData_IndexedFaceSet::TShape in the VRML V2.0 parser in… CVSS 3.1HIGH 7.5
  • TI-2026-30761 A heap-based out-of-bounds read vulnerability in RWObj_Reader::read in the OBJ file… CVSS 3.1HIGH 7.1
  • TI-2026-30760 Two heap-based out-of-bounds read vulnerabilities in the STL ASCII file parser in Open… CVSS 3.1HIGH 7.1
  • TI-2026-30765 Open CASCADE Technology (OCCT) V8_0_0_rc5 contains multiple vulnerabilities in its IGES… CVSS 3.1MEDIUM 5.5
  • TI-2026-30764 A stack-based out-of-bounds read vulnerability in VrmlData_Scene::ReadLine in the VRML… CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences