Two heap-based out-of-bounds read vulnerabilities exist in the STL ASCII file parser of Open CASCADE Technology (OCCT) V8_0_0_rc5. These vulnerabilities arise from improper length validation of buffers returned by Standard_ReadLineBuffer::ReadLine() before usage in RWStl_Reader::ReadAscii. An attacker can exploit these flaws by convincing a user to open a specially crafted STL file with very short lines, potentially causing denial of service or information disclosure.