open cascade technology vulnerabilities and fixes

Recent CVEs affecting open cascade technology, with upgrade or downgrade steps. 6 tracked.

Also searched as: opencascadetechnology.

open cascade technology has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-05-01. Highest priority: CVE-2026-42478 (score 34/100).

• CVE-2026-42481 MEDIUM 5.5 UPGRADE Open CASCADE Technology (OCCT) V8_0_0_rc5 contains multiple vulnerabilities in its IGES and STEP file parsers
• CVE-2026-42480 MEDIUM 5.5 UPGRADE A stack-based out-of-bounds read vulnerability in VrmlData_Scene::ReadLine in the VRML parser in Open CASCADE
• CVE-2026-42479 MEDIUM 5.5 UPGRADE An out-of-bounds read vulnerability in VrmlData_IndexedLineSet::TShape in the VRML parser in Open CASCADE Tech
• CVE-2026-42478 HIGH 7.5 UPGRADE An issue was discovered in VrmlData_IndexedFaceSet::TShape in the VRML V2.0 parser in Open CASCADE Technology
• CVE-2026-42477 HIGH 7.1 UPGRADE A heap-based out-of-bounds read vulnerability in RWObj_Reader::read in the OBJ file parser in Open CASCADE Tec
• CVE-2026-42476 HIGH 7.1 UPGRADE Two heap-based out-of-bounds read vulnerabilities in the STL ASCII file parser in Open CASCADE Technology (OCC

FAQ

How do I fix open cascade technology vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is open cascade technology being exploited right now?

None of the tracked open cascade technology CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which open cascade technology CVE should I patch first?

CVE-2026-42478 currently ranks highest (34/100): An issue was discovered in VrmlData_IndexedFaceSet::TShape in the VRML V2.0 parser in Open CASCADE Technology .

RSS feed for open cascade technology · ← Back to latest CVEs