This vulnerability involves a stack-based out-of-bounds read in the VRML parser of Open CASCADE Technology (OCCT) V8_0_0_rc5. Specifically, the VrmlData_Scene::ReadLine function improperly uses ptr[++anOffset] without verifying that the incremented offset remains within the bounds of a fixed-size stack buffer. This can lead to reading memory beyond the buffer limits when processing crafted VRML files, causing a denial of service by crashing the application. There is no CVSS score or vendor advisory indicating patch availability or mitigation steps. The vulnerability is limited to local processing of malicious VRML files and does not involve remote code execution or data disclosure.

The vulnerability allows an attacker to cause a denial of service by crashing the application that parses VRML files in OCCT V8_0_0_rc5. There is no indication of code execution or data leakage. No known exploits exist in the wild. The impact is limited to availability disruption when processing malicious VRML content.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, avoid processing untrusted or unauthenticated VRML files with affected versions of OCCT. No vendor advisory or patch information is currently available to indicate an official fix or temporary workaround.