Vulnerabilidades de Ogre3d
CVEs publicadas que afetam produtos de Ogre3d: 2 registro(s), com severidade, exploração e correções.
CVE-2025-11017
Média · 5.5
CWE-476 26/09/2025
OGRECave Ogre OgreLogManager.cpp stream null pointer dereference
A vulnerability was detected in OGRECave Ogre up to 14.4.1. The impacted element is the function Ogre::LogManager::stream of the file /ogre/OgreMain/src/OgreLogManager.cpp. Performing manipulation of the argument mDefaultLog results in null pointer dereference. The attack must be initiated from a local position. The exploit is now public and may be used.
CVE-2025-11014
Alta · 7.8
CWE-787 26/09/2025
OGRECave Ogre Image OgreSTBICodec.cpp encode heap-based overflow
A security flaw has been discovered in OGRECave Ogre up to 14.4.1. This issue affects the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp of the component Image Handler. The manipulation results in heap-based buffer overflow. The attack is only possible with local access. The exploit has been released to the public and may be exploited.