Skip to content

ExcelsisView 1.1.15

Choose a tag to compare

View all tags
@simonsystem609 simonsystem609 released this 31 Jul 12:55
· 20 commits to main since this release
Immutable release. Only release title and notes can be modified.
excelsis-view-v1.1.15
3ea877c
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

ExcelsisView 1.1.15 is a security-hardening release for the U3D path in
supported 3D PDF documents.

Changes:

  • Added checked limits for U3D JPEG/PNG dimensions, pitch, component count,
    multiplication, allocation, reallocation, resize buffers, and render copies.
  • Validated animation and subdivision output pointers before dereference.
  • Added hostile native and bridge tests covering overflow, excessive sizes,
    allocation failure, and truncated JPEG/PNG texture data.
  • Passed GitHub CodeQL for C/C++, JavaScript/TypeScript, and Python; the seven
    previously blocking U3D findings are absent from the 1.1.15 analysis.
  • Preserved the existing DXF, DWG, regular PDF, PRC, U3D, OCR, export, and
    Explorer-thumbnail capabilities.

Licensing and source:

  • ExcelsisView and nanoPRC are AGPL-3.0-or-later.
  • LibreDWG is GPL-3.0-or-later; U3D is Apache-2.0.
  • The exact complete application, nanoPRC, U3D, and LibreDWG corresponding
    source packages are attached and are also available from the installed
    resources.
  • See AUDIT-1.1.15.md and SHA256SUMS.txt in the repository for the complete
    release assessment and hashes.

Windows notice: the installer and first-party binaries are unsigned and may
trigger SmartScreen. Kaspersky 21.25 with 2026-07-31 bases scanned the exact
release assets, unpacked payload, and expanded source with zero detections or
suspicions. Microsoft Defender was disabled, so no Defender scan is claimed.
Verify the published SHA-256 before running the installer.

Assets 15
Loading