Description (CNA)
A weakness has been identified in OGRECave Ogre up to 14.4.1. Impacted is the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp. This manipulation causes mismatched memory management routines. The attack is restricted to local execution. The exploit has been made available to the public and could be exploited.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OGRECave / Ogre | affected 14.4.0; affected 14.4.1 |
CWE
CWE-762, CWE-119
References
- https://vuldb.com/?id.325958
- https://vuldb.com/?ctiid.325958
- https://vuldb.com/?submit.654340
- https://github.com/OGRECave/ogre/issues/3446
- https://github.com/user-attachments/files/22328216/poc.zip
ADP enrichment
No English description supplied.
No references supplied.