A vulnerability was detected in OGRECave Ogre up to 14.4... · CVE-2025-11017 · GitHub Advisory Database · GitHub

A vulnerability was detected in OGRECave Ogre up to 14.4...

Moderate severity Unreviewed Published Sep 26, 2025 to the GitHub Advisory Database • Updated Oct 8, 2025

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A vulnerability was detected in OGRECave Ogre up to 14.4.1. The impacted element is the function Ogre::LogManager::stream of the file /ogre/OgreMain/src/OgreLogManager.cpp. Performing manipulation of the argument mDefaultLog results in null pointer dereference. The attack must be initiated from a local position. The exploit is now public and may be used.

References

Published by the National Vulnerability Database

Sep 26, 2025

Published to the GitHub Advisory Database Sep 26, 2025

Last updated Oct 8, 2025

Weaknesses

CWE-404

Improper Resource Shutdown or Release

The product does not release or incorrectly releases a resource before it is made available for re-use. Learn more on MITRE.

CWE-476

NULL Pointer Dereference

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. Learn more on MITRE.