Memory Management Issue in SAP 3D Visual Enterprise Viewer by SAP

CVE-2022-41190

What is CVE-2022-41190?

A vulnerability exists in SAP 3D Visual Enterprise Viewer version 9, where improper memory management can be exploited by opening a specially crafted AutoCAD (.dxf) file from untrusted sources. This flaw may trigger remote code execution, utilizing stack-based overflow or dangling pointer reuse to manipulate memory space, leading to potential unauthorized actions on the affected system.

References