This vulnerability affects the STL ASCII file parser component of Open CASCADE Technology (OCCT) version V8_0_0_rc5. Specifically, the RWStl_Reader::ReadAscii function does not properly validate the length of buffers returned by Standard_ReadLineBuffer::ReadLine() before using strncasecmp or direct byte access. This results in two heap-based out-of-bounds read vulnerabilities. An attacker can exploit these by convincing a user to open a maliciously crafted STL file containing extremely short lines, which may cause a denial of service or potentially leak information from memory.

Successful exploitation can lead to denial of service or possible information disclosure due to out-of-bounds reads. The attack requires user assistance, as the victim must open a specially crafted STL file. There is no indication of remote code execution or broader system compromise from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented at this time. Users should exercise caution when opening STL files from untrusted sources until a patch or mitigation is available.