Approved changes feed: RSS · Atom

cpe:2.3:a:ogrecave:ogre:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOgrecave (1548e027-3281-5ead-97d3-622beee6597c)
ProductOgre (1eb6b28d-c7a2-5de9-86c4-6009edd11924)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-11017 vulnerable 2026-06-08 07:02:27.932646 OGRECave Ogre OgreLogManager.cpp stream null pointer dereference
LOW (3.3)
A vulnerability was detected in OGRECave Ogre up to 14.4.1. The impacted element is the function Ogre::LogManager::stream of the file /ogre/OgreMain/src/OgreLogManager.cpp. Performing manipulation of the argument mDefaultLog results in null pointer dereference. The attack must be initiated from a local position. The exploit is now public and may be used.
Published: 2025-09-26T14:02:06.178Z
Updated: 2025-09-26T15:15:50.726Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11015 vulnerable 2026-06-08 07:02:27.931709 OGRECave Ogre OgreSTBICodec.cpp encode mismatched memory management routines
MEDIUM (5.3)
A weakness has been identified in OGRECave Ogre up to 14.4.1. Impacted is the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp. This manipulation causes mismatched memory management routines. The attack is restricted to local execution. The exploit has been made available to the public and could be exploited.
Published: 2025-09-26T13:32:06.704Z
Updated: 2025-09-26T19:53:54.435Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11014 vulnerable 2026-06-08 07:02:27.930168 OGRECave Ogre Image OgreSTBICodec.cpp encode heap-based overflow
MEDIUM (5.3)
A security flaw has been discovered in OGRECave Ogre up to 14.4.1. This issue affects the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp of the component Image Handler. The manipulation results in heap-based buffer overflow. The attack is only possible with local access. The exploit has been released to the public and may be exploited.
Published: 2025-09-26T12:02:09.871Z
Updated: 2025-09-26T12:59:56.473Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.