CVE-2022-2951
High
Description
Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to improper validation of array index vulnerability during processing of H3D files. A DWORD value from a PoC file is extracted and used as an index to write to a buffer, leading to memory corruption.
SeverityHigh
CVSS7.8
Exploit probability—
ProductAltair Hyperview Player
PublishedDec 13, 2022
First seenDec 13, 2022
Weakness typeCWE-129CWE-129
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| altair hyperview_player | v ≤ 2021.1.0.27 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.