A weakness has been identified in OGRECave Ogre up to 14.4.1. Impacted is the function STBIImageCodec::encode of the file…
VulDB·CWE-762·Published 2025-09-26
In OGRECave Ogre up to 14.4.1 wurde eine Schwachstelle gefunden. Hierbei geht es um die Funktion STBIImageCodec::encode der Datei /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp. Durch Beeinflussen mit unbekannten Daten kann eine mismatched memory management routines-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs hat dabei lokal zu erfolgen. Der Exploit ist öffentlich verfügbar und könnte genutzt werden.
A weakness has been identified in OGRECave Ogre up to 14.4.1. Impacted is the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp. This manipulation causes mismatched memory management routines. The attack is restricted to local execution. The exploit has been made available to the public and could be exploited.
A weakness has been identified in OGRECave Ogre up to 14.4.1. Impacted is the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp. This manipulation causes mismatched memory management routines. The attack is restricted to local execution. The exploit has been made available to the public and could be exploited.
Se ha identificado una debilidad en OGRECave Ogre hasta la versión 14.4.1. La función afectada es STBIImageCodec::encode del archivo /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp. Esta manipulación causa rutinas de gestión de memoria no coincidentes. El ataque está restringido a ejecución local. El exploit ha sido puesto a disposición del público y podría ser explotado.
| Version | Type | Source | Base | Exp | Impact | Vector |
|---|---|---|---|---|---|---|
| 2.0 | Primary | cve.org | 4.3 | — | — | AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR |
| 2.0 | Primary | cve.org | 4.3 | — | — | AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR |
| 2.0 | Secondary | NVD | 4.3 | 3.1 | 6.4 | AV:L/AC:L/Au:S/C:P/I:P/A:P |
| 3.0 | Primary | cve.org | 5.3 | — | — | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R |
| 3.0 | Primary | cve.org | 5.3 | — | — | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R |
| 3.1 | Primary | cve.org | 5.3 | — | — | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R |
| 3.1 | Primary | cve.org | 5.3 | — | — | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R |
| 3.1 | Secondary | NVD | 5.3 | 1.8 | 3.4 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
| 4.0 | Primary | cve.org | 4.8 | — | — | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P |
| 4.0 | Primary | cve.org | 4.8 | — | — | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P |
| 4.0 | Secondary | NVD | 1.9 | — | — | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |