PatchTheCVECVE-2022-2949: Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized memory vu
CVE-2022-2949 is a high-severity flaw (CVSS 7.8) affecting hyperview player. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized memory vulnerability during parsing of H3D files. A DWORD is extracted from an uninitialized buffer and, after sign extension, is used as an index into a stack variable to increment a counter leading to memory corruption.
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.8 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.3% (top 78%) |
| CISA exploited list | No |
| Weakness | CWE-908 |
| Published | 2022-12-13 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2022-2949?
hyperview player: upgrade to newer than 2021.1.0.27. Exact commands for each OS are on this page.
Is CVE-2022-2949 being exploited?
CVE-2022-2949 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2022-2949 affect?
CVE-2022-2949 affects hyperview player. Severity is high (CVSS 7.8). Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized memory vulnerability during parsing of H3D files. A DWORD is extracted from an uninitialized buffer and, after sign extension, is used as a
How urgent is CVE-2022-2949?
Priority 33/100. High severity
Related CVEs
- CVE-2022-2951 HIGH 7.8 UPGRADE Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to improper validation of array index
- CVE-2022-2950 HIGH 7.8 UPGRADE Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized memory vu
- CVE-2022-2947 HIGH 7.8 UPGRADE Altair HyperView Player versions 2021.1.0.27 and prior perform operations on a memory buffer but can read f