CVE-2025-8854
bullet3 VHACD utility: stack-based buffer overflow in OFF parser (LoadOFF)
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
bullet3 VHACD utility: stack-based buffer overflow in OFF parser (LoadOFF)
Stack-based buffer overflow in LoadOFF in bulletphysics bullet3 before 3.26 on all platforms allows remote attackers to execute arbitrary code via a crafted OFF file with an overlong initial token processed by the VHACD test utility or invoked indirectly through PyBullet's vhacd function.
Reserved 2025-08-11 | Published 2025-08-11 | Updated 2025-08-11 | Assigner CyberArkCWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
| 2024-12-01: | Initial vendor notification (no response) |
| 2025-08-10: | Public disclosure via GitHub issue |
Simcha Kosman
github.com/...ob/master/Extras/VHACD/test/src/main_vhacd.cpp
github.com/bulletphysics/bullet3/issues/4732
Support options
