CVE-2026-42478Disclosure(opencascade / open_cascade_technology)

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An issue was discovered in VrmlData_IndexedFaceSet::TShape in the VRML V2.0 parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of service via a crafted VRML file. The issue occurs because malformed VRML input can trigger dereference of a corrupt or unvalidated pointer during shape construction in libTKDEVRML.so.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-476CWE-125

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • open_cascade_technology

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Affected systems

Products
open_cascade_technology

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-05-01: 2Technical Details · 2026-05-01: 205-01
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • CVE@CVEnew
    General

    CVE-2026-42478 An issue was discovered in VrmlData_IndexedFaceSet::TShape in the VRML V2.0 parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of … https://www.cve.org/CVERecord?id=CVE-2026-42478

    Post summary

    The tweet announces CVE-2026-42478 describing a denial‑of‑service flaw in OCCT’s VRML parser but offers no PoC, exploit code, patch, or evidence of active exploitation.

    00010171
    57.4K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-42478 An issue was discovered in VrmlData_IndexedFaceSet::TShape in the VRML V2.0 parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of … https://www.cve.org/CVERecord?id=CVE-2026-42478 ----- Traducción: CVE-2026-42478 Se … http://infoflow.cloud`

    Post summary

    The post announces a newly discovered denial‑of‑service vulnerability (CVE-2026-42478) in Open CASCADE Technology’s VRML parser and links to the CVE record, without providing exploit or patch details.

    0000031
    75 followersView on X
CPE platform detail7 entries

7 of 7 entries

PartVendorProductVersionTarget SWTarget HW
Appopencascadeopen_cascade_technology---
Appopencascadeopen_cascade_technology8.0.0--
Appopencascadeopen_cascade_technology8.0.0--
Appopencascadeopen_cascade_technology8.0.0--
Appopencascadeopen_cascade_technology8.0.0--
Appopencascadeopen_cascade_technology8.0.0--
Appopencascadeopen_cascade_technology8.0.0--

Explore more