Memory Management Vulnerability in SAP 3D Visual Enterprise Author

CVE-2022-41176

What is CVE-2022-41176?

A security vulnerability exists in SAP 3D Visual Enterprise Author, specifically in version 9, due to improper memory management. When users open a crafted Enhanced Metafile (.emf or emf.x3d) file from untrusted sources, the application may crash unexpectedly. This results in temporary unavailability of the application, requiring a restart for the user to regain access. The flaw necessitates caution when handling .emf files from unknown origins to mitigate potential disruptions.

References