CVE-2022-41188 | Vulnetix

CVE-2022-41188 PUBLISHED

Reported by sap · Published October 11, 2022

Due to lack of proper memory management, when a victim opens manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
3d_visual_enterprise_viewer	sap	9.0

Affected products

Vendor	Product	Versions
SAP SE	SAP 3D Visual Enterprise Viewer	9
SAP SE	SAP 3D Visual Enterprise Viewer	9

Timeline

Oct 11, 2022 CVE Published
Oct 12, 2022 EPSS Score (30 in total, the first dated here)
Aug 3, 2024 CVE Updated
Apr 3, 2026 Security Advisory
Jun 16, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2022-41188
vulnetix vdb fixes CVE-2022-41188

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2022-41188/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →