The vulnerability in Open CASCADE Technology (OCCT) V8_0_0_rc5 involves a heap-based out-of-bounds read in the OBJ file parser's RWObj_Reader::read function. Specifically, Standard_ReadLineBuffer::ReadLine() may return a 1-byte buffer for minimal OBJ lines, but RWObj_Reader::read() calls pushIndices(aLine + 2) without validating that the buffer length is sufficient. This improper validation can cause out-of-bounds memory reads, potentially leading to denial of service or leakage of sensitive information when processing crafted OBJ files.

Successful exploitation can cause application crashes resulting in denial of service or allow attackers to read memory beyond intended boundaries, potentially exposing sensitive information. The vulnerability requires user interaction to open a malicious OBJ file. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should avoid opening untrusted or suspicious OBJ files with affected versions of Open CASCADE Technology. Monitor vendor channels for updates regarding patches or mitigations.