CVE-2025-8854

Publication date

2025-08-11 04:24:02

Family

CyberArk

State

PUBLISHED

Description

Stack-based buffer overflow in LoadOFF in bulletphysics bullet3 before 3.26 on all platforms allows remote attackers to execute arbitrary code via a crafted OFF file with an overlong initial token processed by the VHACD test utility or invoked indirectly through PyBullets vhacd function.