CVE-2022-41197: Due to lack of proper memory management, when a victim opens a manipulated VRML Worlds (.wrl, vrml.x3d) file received from untrusted sources in SAP 3D Visual…

high7.8CVSS 3.1

AVLACLPRNUIRSUCHIHAH

Due to lack of proper memory management, when a victim opens a manipulated VRML Worlds (.wrl, vrml.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
intel	optimization_for_tensorflow	>= 0 < 2.5.3	2.5.3
intel	optimization_for_tensorflow	>= 2.6.0 < 2.6.3	2.6.3
intel	optimization_for_tensorflow	>= 2.7.0 < 2.7.1	2.7.1
sap	3d_visual_enterprise_viewer	< 9.0	9.0
sap_se	sap_3d_visual_enterprise_viewer	—	—

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

ghsa5.5MEDIUM