CVE-2022-2950

Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized memory vulnerability during parsing of H3D files. A DWORD is extracted from an uninitialized buffer and, after sign extension, is used as an index into a stack variable to increment a counter leading to memory corruption.
References
Link Resource
https://www.cisa.gov/uscert/ics/advisories/icsa-22-284-01 Patch Third Party Advisory US Government Resource
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:altair:hyperview_player:*:*:*:*:*:*:*:*

Information

Published : 2022-12-13 13:15

Updated : 2022-12-19 07:08


NVD link : CVE-2022-2950

Mitre link : CVE-2022-2950


JSON object : View

CWE
CWE-908

Use of Uninitialized Resource

Advertisement

dedicated server usa

Products Affected

altair

  • hyperview_player