Approved changes feed: RSS · Atom

cpe:2.3:a:ogre3d:ogre:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOgre3D (49defe32-e381-5c3a-99ed-0faf1d0c34d1)
ProductOgre (cb720aed-0e6e-5d90-af54-9ed579683e5a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-11017 vulnerable 2026-06-08 07:02:27.932686 OGRECave Ogre OgreLogManager.cpp stream null pointer dereference
LOW (3.3)
A vulnerability was detected in OGRECave Ogre up to 14.4.1. The impacted element is the function Ogre::LogManager::stream of the file /ogre/OgreMain/src/OgreLogManager.cpp. Performing manipulation of the argument mDefaultLog results in null pointer dereference. The attack must be initiated from a local position. The exploit is now public and may be used.
Published: 2025-09-26T14:02:06.178Z
Updated: 2025-09-26T15:15:50.726Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11014 vulnerable 2026-06-08 07:02:27.931163 OGRECave Ogre Image OgreSTBICodec.cpp encode heap-based overflow
MEDIUM (5.3)
A security flaw has been discovered in OGRECave Ogre up to 14.4.1. This issue affects the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp of the component Image Handler. The manipulation results in heap-based buffer overflow. The attack is only possible with local access. The exploit has been released to the public and may be exploited.
Published: 2025-09-26T12:02:09.871Z
Updated: 2025-09-26T12:59:56.473Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.