Threats tagged 'ghsa-8wqm-37mp-6rrm'

Open CASCADE Technology (OCCT) version V8_0_0_rc5 contains multiple vulnerabilities in its IGES and STEP file parsers. These include out-of-bounds reads during B-spline curve evaluation and construction, as well as infinite recursion when processing certain STEP entities. Exploitation of these flaws may lead to denial of service or unintended memory disclosure. The CVSS score is 5.5, indicating a medium severity level. No patch or fixed versions are currently indicated.