high7.8
CVE-2022-2951
Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to improper validation of array index vulnerability during processing of H3D files.
Impact
Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to improper validation of array index vulnerability during processing of H3D files. A DWORD value from a PoC file is extracted and used as an index to write to a buffer, leading to memory corruption.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Altair | Hyperview Player | through 2021.1.0.27 |