An out-of-bounds write vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process.
References
Link | Resource |
---|---|
https://www.opendesign.com/security-advisories | Vendor Advisory |
https://www.zerodayinitiative.com/advisories/ZDI-21-1337/ | Third Party Advisory VDB Entry |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2021-11-14T20:53:15
Updated: 2021-11-29T17:06:35
Reserved: 2021-11-02T00:00:00
Link: CVE-2021-43279
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-11-14T21:15:08.177
Modified: 2021-11-30T20:23:20.480
Link: CVE-2021-43279
JSON object: View
Redhat Information
No data.
CWE