CVE-2021-44046: Opendesign Prc SDK

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

An out-of-bounds write vulnerability exists when reading U3D files in Open Design Alliance PRC SDK before 2022.11. An unchecked return value of a function (verifying input data from a U3D file) leads to an out-of-bounds write. An attacker can leverage this vulnerability to execute code in the context of the current process.

Affected products

• Opendesign Prc SDK: before 2022.11 (fixed in 2022.11)

Published 2021-12-05. Last modified 2026-06-17.