← Database

CVE-2025-11017

LOW CVSS: 3.3 Published: 2025-09-26 Modified: 2026-06-17

Description

A vulnerability was detected in OGRECave Ogre up to 14.4.1. The impacted element is the function Ogre::LogManager::stream of the file /ogre/OgreMain/src/OgreLogManager.cpp. Performing manipulation of the argument mDefaultLog results in null pointer dereference. The attack must be initiated from a local position. The exploit is now public and may be used.

Affected Platforms

Ogre3D Ogre

Weakness Type

CWE-404, CWE-476, CWE-476

References