PatchTheCVE: opencascadehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2026-42481: Open CASCADE Technology (OCCT) V8_0_0_rc5 contains multiple vulnerabilities in its IGES and STEP file parsers https://patchthecve.com/cve/CVE-2026-42481.htmlhttps://patchthecve.com/cve/CVE-2026-42481.htmlWed, 17 Jun 2026 10:47:54 +0000MEDIUM 5.5: Open CASCADE Technology (OCCT) V8_0_0_rc5 contains multiple vulnerabilities in its IGES and STEP file parsers that can be triggered by crafted IGES or STEP files. These issues include an out-of-bounds read in Geom2d_BSplineCurve::EvalD0 during IGES B-spline curve evaluation, an out-of-bounds read inCVE-2026-42480: A stack-based out-of-bounds read vulnerability in VrmlData_Scene::ReadLine in the VRML parser in Open CASCADE https://patchthecve.com/cve/CVE-2026-42480.htmlhttps://patchthecve.com/cve/CVE-2026-42480.htmlWed, 17 Jun 2026 10:47:54 +0000MEDIUM 5.5: A stack-based out-of-bounds read vulnerability in VrmlData_Scene::ReadLine in the VRML parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of service via a crafted VRML file. The issue occurs because the quoted-string escape handler uses ptr[++anOffset] without proCVE-2026-42479: An out-of-bounds read vulnerability in VrmlData_IndexedLineSet::TShape in the VRML parser in Open CASCADE Techhttps://patchthecve.com/cve/CVE-2026-42479.htmlhttps://patchthecve.com/cve/CVE-2026-42479.htmlWed, 17 Jun 2026 10:47:54 +0000MEDIUM 5.5: An out-of-bounds read vulnerability in VrmlData_IndexedLineSet::TShape in the VRML parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of service via a crafted VRML file. The issue occurs because coordIndex values from parsed input are used as direct array indices CVE-2026-42478: An issue was discovered in VrmlData_IndexedFaceSet::TShape in the VRML V2.0 parser in Open CASCADE Technology https://patchthecve.com/cve/CVE-2026-42478.htmlhttps://patchthecve.com/cve/CVE-2026-42478.htmlWed, 17 Jun 2026 10:47:54 +0000HIGH 7.5: An issue was discovered in VrmlData_IndexedFaceSet::TShape in the VRML V2.0 parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows attackers to cause a denial of service via a crafted VRML file. The issue occurs because malformed VRML input can trigger dereference of a corrupt or unvalidated poiCVE-2026-42477: A heap-based out-of-bounds read vulnerability in RWObj_Reader::read in the OBJ file parser in Open CASCADE Techttps://patchthecve.com/cve/CVE-2026-42477.htmlhttps://patchthecve.com/cve/CVE-2026-42477.htmlWed, 17 Jun 2026 10:47:54 +0000HIGH 7.1: A heap-based out-of-bounds read vulnerability in RWObj_Reader::read in the OBJ file parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 allows user-assisted attackers to cause a denial of service or obtain sensitive information by persuading a victim to open a crafted OBJ file. The issue occurs becaCVE-2026-42476: Two heap-based out-of-bounds read vulnerabilities in the STL ASCII file parser in Open CASCADE Technology (OCChttps://patchthecve.com/cve/CVE-2026-42476.htmlhttps://patchthecve.com/cve/CVE-2026-42476.htmlWed, 17 Jun 2026 10:47:54 +0000HIGH 7.1: Two heap-based out-of-bounds read vulnerabilities in the STL ASCII file parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 exist in RWStl_Reader::ReadAscii because buffers returned by Standard_ReadLineBuffer::ReadLine() are not properly length-validated before strncasecmp or direct byte access. Use