Two heap-based out-of-bounds read vulnerabilities in the STL ASCII file parser in Open CASCADE Technology (OCCT) V8_0_0_rc5 exist in RWStl_Reader::ReadAscii bec…

Two heap-based out-of-bounds read vulnerabilities exist in Open CASCADE Technology (OCCT) V8_0_0_rc5 STL ASCII file parser. The vulnerabilities occur in RWStl_Reader::ReadAscii function due to improper length validation of buffers from Standard_ReadLineBuffer::ReadLine(). Attackers can exploit this by convincing victims to open malicious STL files with extremely short lines. The vulnerability can lead to denial of service or information disclosure through user-assisted attacks.