Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Two heap-based out-of-bounds read vulnerabilities in the STL ASCII file parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 exist in RWStl_Reader::ReadAscii because buffers returned by Standard_ReadLineBuffer::ReadLine() are not properly length-validated before strncasecmp or direct byte access. User-assisted attackers can trigger these issues by persuading a victim to open a crafted STL file with extremely short lines, resulting in a denial of service or possible information disclosure.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-42476 Two heap-based out-of-bounds read vulnerabilities in the STL ASCII file parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 exist in RWStl_Reader::ReadAscii because b… https://www.cve.org/CVERecord?id=CVE-2026-42476
Post summary
CVE-2026-42476 discloses two heap-based out‑of‑bounds read flaws in OCCT’s STL ASCII parser (RWStl_Reader::ReadAscii); the post provides technical details but no PoC, exploit or patch information.
🚨*CVE* CVE-2026-42476 Two heap-based out-of-bounds read vulnerabilities in the STL ASCII file parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 exist in RWStl_Reader::ReadAscii because b… https://www.cve.org/CVERecord?id=CVE-2026-42476 ----- Traducción: CVE-2026-42476 Dos… http://infoflow.cloud`
Post summary
CVE‑2026‑42476 is disclosed, describing two heap‑based out‑of‑bounds read bugs in Open CASCADE’s STL ASCII parser, with no evidence of exploitation or mitigation steps.
7 of 7 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | opencascade | open_cascade_technology | - | - | - |
| App | opencascade | open_cascade_technology | 8.0.0 | - | - |
| App | opencascade | open_cascade_technology | 8.0.0 | - | - |
| App | opencascade | open_cascade_technology | 8.0.0 | - | - |
| App | opencascade | open_cascade_technology | 8.0.0 | - | - |
| App | opencascade | open_cascade_technology | 8.0.0 | - | - |
| App | opencascade | open_cascade_technology | 8.0.0 | - | - |