NASA openVSP Buffer Overflow Vulnerability Leading to Denial-of-Service

A buffer overflow vulnerability has been identified in NASA openVSP version 3.16.1. This vulnerability allows local attackers to cause the application to crash by entering an excessively long string in the geometry name field. The issue can be exploited by pasting a 5000-byte payload into the name input field within the Geom browser pod addition interface, effectively triggering a denial-of-service condition.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the application to crash.