A heap-based out-of-bounds read vulnerability in RWObj_Reader::read in the OBJ file parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows user-assisted attackers to cause a denial of service or obtain sensitive information by persuading a victim to open a crafted OBJ file. The issue occurs because Standard_ReadLineBuffer::ReadLine() can return a 1-byte buffer for a minimal OBJ line, and RWObj_Reader::read() calls pushIndices(aLine + 2) without validating the buffer length.
7.3.3+dfsg1-17.3.3+dfsg1-1build17.5.1+dfsg1-27.5.1+dfsg1-2ubuntu17.6.3+dfsg1-77.6.3+dfsg1-7.17.6.3+dfsg1-7.1build17.8.1+dfsg1-37.8.1+dfsg1-37.9.2+dfsg-27.9.2+dfsg-37.9.2+dfsg-4Exploitability
AV:LAC:LPR:LUI:NScope
S:UImpact
C:NI:NA:HCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H