Filtered by vendor Ogre3d Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-11014 2 Ogre3d, Ogrecave 2 Ogre, Ogre 2025-10-16 5.3 Medium
A security flaw has been discovered in OGRECave Ogre up to 14.4.1. This issue affects the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp of the component Image Handler. The manipulation results in heap-based buffer overflow. The attack is only possible with local access. The exploit has been released to the public and may be exploited.
CVE-2025-11017 2 Ogre3d, Ogrecave 2 Ogre, Ogre 2025-10-08 3.3 Low
A vulnerability was detected in OGRECave Ogre up to 14.4.1. The impacted element is the function Ogre::LogManager::stream of the file /ogre/OgreMain/src/OgreLogManager.cpp. Performing manipulation of the argument mDefaultLog results in null pointer dereference. The attack must be initiated from a local position. The exploit is now public and may be used.