CVE-2022-41188
published 2022-10-11CVE-2022-41188: Due to lack of proper memory management, when a victim opens manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP…
PriorityP433high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.33%
26.0th percentile
Due to lack of proper memory management, when a victim opens manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap | 3d_visual_enterprise_viewer | < 9.0 | 9.0 |
| sap_se | sap_3d_visual_enterprise_viewer | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
SAP 3D Visual Enterprise Author 9 OBJ File ObjTranslator.exe memory corruption (EUVD-2022-44429)
vuldb·2026-07-30·CVSS 7.8
CVE-2022-41188 [HIGH] SAP 3D Visual Enterprise Author 9 OBJ File ObjTranslator.exe memory corruption (EUVD-2022-44429)
A vulnerability marked as critical has been reported in SAP 3D Visual Enterprise Author 9. The impacted element is an unknown function of the file ObjTranslator.exe of the component OBJ File Handler. This manipulation causes memory corruption.
This vulnerability appears as CVE-2022-41188. The attack may be initiated remotely. There is no available exploit.
Applying a patch is the recommended action to fix this issue.
GHSA
GHSA-fmf8-f8cv-gwh7: Due to lack of proper memory management, when a victim opens manipulated Wavefront Object (
ghsa_unreviewed·2022-10-12
CVE-2022-41188 [HIGH] CWE-119 GHSA-fmf8-f8cv-gwh7: Due to lack of proper memory management, when a victim opens manipulated Wavefront Object (
Due to lack of proper memory management, when a victim opens manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-10-11
Published