CVE-2026-42480 Details
Description
A stack-based out-of-bounds read vulnerability in VrmlData_Scene::ReadLine in the VRML parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of service via a crafted VRML file. The issue occurs because the quoted-string escape handler uses ptr[++anOffset] without proper bounds checking, which can read past the end of a fixed-size stack buffer.
A stack-based out-of-bounds read vulnerability has been identified in the VRML parser of Open CASCADE Technology (OCCT) version 8.0.0 release candidate 5. This vulnerability allows attackers to cause a denial-of-service by exploiting the way quoted-string escape handling reads data without proper bounds checking, leading to a read past the end of a fixed-size stack buffer. The issue arises in the 'VrmlData_Scene::ReadLine' function, where the escape handler improperly manages string lengths, creating the potential for stack memory corruption.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 1, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://gist.github.com/sgInnora/dfba083d04906283e9c92aea78e2d94a | [email protected] | Third Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| opencascade open cascade technology | <= 7.9.3 8.0.0 beta1 8.0.0 rc1 8.0.0 rc2 8.0.0 rc3 8.0.0 rc4 8.0.0 rc5 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 1, 2026 | Initial Analysis | [email protected] |
| May 1, 2026 | CVE Modified | CISA-ADP |
| May 1, 2026 | New CVE Received | [email protected] |