CVE-2020-28594

2021-08-1720:15:07

Google

osv.dev

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.0%

JSON

A use-after-free vulnerability exists in the _3MF_Importer::_handle_end_model() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

CPENameOperatorVersion
prusaslicereqersion_2.1.0
prusaslicereqersion_1.40.1-rc2
prusaslicereq0.5.6
prusaslicereqersion_1.41.0-alpha3
prusaslicereqersion_1.37.1
prusaslicereq0.5.2
prusaslicereq1.0.0RC1
prusaslicereqersion_1.31.2
prusaslicereqersion_1.40.1-beta
prusaslicereqersion_1.42.0-alpha7

Name	Operator	Version
prusaslicer	eq	ersion_2.1.0
prusaslicer	eq	ersion_1.40.1-rc2
prusaslicer	eq	0.5.6
prusaslicer	eq	ersion_1.41.0-alpha3
prusaslicer	eq	ersion_1.37.1
prusaslicer	eq	0.5.2
prusaslicer	eq	1.0.0RC1
prusaslicer	eq	ersion_1.31.2
prusaslicer	eq	ersion_1.40.1-beta
prusaslicer	eq	ersion_1.42.0-alpha7