Skip to content
OpenAdvisories
High · 7.8 CVE-2022-2949 EUVD-2022-35170GHSA-xfjq-qrvp-mv7m

Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized memory vulnerability during parsing of H3…

Published Dec 13, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Description

Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized memory vulnerability during parsing of H3D files. A DWORD is extracted from an uninitialized buffer and, after sign extension, is used as an index into a stack variable to increment a counter leading to memory corruption.

Affected products

VendorProductAffectedFixed
Altair HyperView Player ≤ 2021.1.0.27 —

Advisories 1

References