<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: altair</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2022-2951: 


Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to improper validation of array index</title><link>https://patchthecve.com/cve/CVE-2022-2951.html</link><guid>https://patchthecve.com/cve/CVE-2022-2951.html</guid><pubDate>Wed, 17 Jun 2026 04:42:52 +0000</pubDate><description>HIGH 7.8: 


Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to improper validation of array index vulnerability during processing of H3D files. A DWORD value from a PoC file is extracted and used as an index to write to a buffer, leading to memory corruption.






</description></item><item><title>CVE-2022-2950: 


Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized memory vu</title><link>https://patchthecve.com/cve/CVE-2022-2950.html</link><guid>https://patchthecve.com/cve/CVE-2022-2950.html</guid><pubDate>Wed, 17 Jun 2026 04:42:52 +0000</pubDate><description>HIGH 7.8: 


Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized memory vulnerability during parsing of H3D files. A DWORD is extracted from an uninitialized buffer and, after sign extension, is used as an index into a stack variable to increment a counter leading</description></item><item><title>CVE-2022-2949: 


Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized memory vu</title><link>https://patchthecve.com/cve/CVE-2022-2949.html</link><guid>https://patchthecve.com/cve/CVE-2022-2949.html</guid><pubDate>Wed, 17 Jun 2026 04:42:52 +0000</pubDate><description>HIGH 7.8: 


Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized memory vulnerability during parsing of H3D files. A DWORD is extracted from an uninitialized buffer and, after sign extension, is used as an index into a stack variable to increment a counter leading</description></item><item><title>CVE-2022-2947: 


Altair HyperView Player versions 2021.1.0.27 and prior perform operations on a memory buffer but can read f</title><link>https://patchthecve.com/cve/CVE-2022-2947.html</link><guid>https://patchthecve.com/cve/CVE-2022-2947.html</guid><pubDate>Wed, 17 Jun 2026 04:42:52 +0000</pubDate><description>HIGH 7.8: 


Altair HyperView Player versions 2021.1.0.27 and prior perform operations on a memory buffer but can read from or write to a memory location outside of the intended boundary of the buffer. This hits initially as a read access violation, leading to a memory corruption situation.



</description></item></channel></rss>