CVE-2022-2950 in HyperView Playerinfo

Summary

by MITRE • 12/14/2022

Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized memory vulnerability during parsing of H3D files. A DWORD is extracted from an uninitialized buffer and, after sign extension, is used as an index into a stack variable to increment a counter leading to memory corruption.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

08/22/2022

Disclosure

12/14/2022

Moderation

accepted

CPE

ready

EPSS

0.00304

KEV

no

Activities

very low

Sources

Might our Artificial Intelligence support you?

Check our Alexa App!