CVE-2022-2947 - Altair HyperView Player versions 2021.1.0.27 and prior perform operations on a memory buffer but can read from or write to a memory location outside of the intended boundary of the buffer

Back Back to CVE browser

HIGH

Altair HyperView Player versions 2021.1.0.27 and prior perform operations on a memory buffer but can read from or write to a memory location outside of the intended boundary of the buffer

Published Dec 13, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.29%

Description

Altair HyperView Player versions 2021.1.0.27 and prior perform operations on a memory buffer but can read from or write to a memory location outside of the intended boundary of the buffer. This hits initially as a read access violation, leading to a memory corruption situation.

Affected products

Vendor Altair Product HyperView Player Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=2021.1.0.27

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Altair

HyperView Player

unaffected

Version	Status	Constraints
0	affected	<=2021.1.0.27

Remediation

Vendor solution

Mitigation measures have been added to the latest version of HyperView Player v2022.1 https://altairone.com/Marketplace . Altair One recommends users apply the update to mitigate these vulnerabilities.

Weaknesses (1)

CWE-119

Buffer Overflow