CVE-2026-42476 Details
Description
Two heap-based out-of-bounds read vulnerabilities in the STL ASCII file parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 exist in RWStl_Reader::ReadAscii because buffers returned by Standard_ReadLineBuffer::ReadLine() are not properly length-validated before strncasecmp or direct byte access. User-assisted attackers can trigger these issues by persuading a victim to open a crafted STL file with extremely short lines, resulting in a denial of service or possible information disclosure.
A heap-based out-of-bounds read vulnerability has been identified in the STL ASCII file parser of Open CASCADE Technology (OCCT) versions through 7.8.1 and the master branch prior to commit c540f316. The vulnerability arises in the 'RWStl_Reader::ReadAscii' function, where buffers returned by 'Standard_ReadLineBuffer::ReadLine()' are not properly validated for length before being accessed. This flaw can be exploited by user-assisted attackers who convince a victim to open a specially crafted STL file containing extremely short lines. The result is a denial-of-service condition or potential information disclosure.
Users are advised to update to the latest version of Open CASCADE Technology where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 1, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://gist.github.com/sgInnora/dfba083d04906283e9c92aea78e2d94a | [email protected] | Third Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
| CWE-125 | Out-of-bounds Read | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| opencascade open cascade technology | <= 7.9.3 8.0.0 beta1 8.0.0 rc1 8.0.0 rc2 8.0.0 rc3 8.0.0 rc4 8.0.0 rc5 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 1, 2026 | CVE Modified | CISA-ADP |
| May 1, 2026 | Initial Analysis | [email protected] |
| May 1, 2026 | New CVE Received | [email protected] |