cvedb.io
CVE-2026-42478
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2026-05-01T15:16:43.857 · Last modified 2026-06-17T10:47:54.537

Summary

An issue was discovered in VrmlData_IndexedFaceSet::TShape in the VRML V2.0 parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of service via a crafted VRML file. The issue occurs because malformed VRML input can trigger dereference of a corrupt or unvalidated pointer during shape construction in libTKDEVRML.so.

Affected products

opencascade — open_cascade_technology

Does this affect you?

Add your gear to cvedb and we'll alert you only when opencascade ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.