PatchTheCVEopencascade vulnerabilities
Recent CVEs affecting opencascade products. 6 tracked.
opencascade has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-05-01. Highest priority: CVE-2026-42478 (score 34/100).
- CVE-2026-42481 MEDIUM 5.5 UPGRADE Open CASCADE Technology (OCCT) V8_0_0_rc5 contains multiple vulnerabilities in its IGES and STEP file parsers
- CVE-2026-42480 MEDIUM 5.5 UPGRADE A stack-based out-of-bounds read vulnerability in VrmlData_Scene::ReadLine in the VRML parser in Open CASCADE
- CVE-2026-42479 MEDIUM 5.5 UPGRADE An out-of-bounds read vulnerability in VrmlData_IndexedLineSet::TShape in the VRML parser in Open CASCADE Tech
- CVE-2026-42478 HIGH 7.5 UPGRADE An issue was discovered in VrmlData_IndexedFaceSet::TShape in the VRML V2.0 parser in Open CASCADE Technology
- CVE-2026-42477 HIGH 7.1 UPGRADE A heap-based out-of-bounds read vulnerability in RWObj_Reader::read in the OBJ file parser in Open CASCADE Tec
- CVE-2026-42476 HIGH 7.1 UPGRADE Two heap-based out-of-bounds read vulnerabilities in the STL ASCII file parser in Open CASCADE Technology (OCC
FAQ
How do I fix opencascade vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is opencascade being exploited right now?
None of the tracked opencascade CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which opencascade CVE should I patch first?
CVE-2026-42478 currently ranks highest (34/100): An issue was discovered in VrmlData_IndexedFaceSet::TShape in the VRML V2.0 parser in Open CASCADE Technology .