CVE-2020-28595

2021-02-1022:15:13

Google

osv.dev

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.1%

JSON

An out-of-bounds write vulnerability exists in the Obj.cpp load_obj() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

CPENameOperatorVersion
prusaslicereqersion_2.1.0
prusaslicereqersion_1.40.1-rc2
prusaslicereq0.5.6
prusaslicereqersion_1.41.0-alpha3
prusaslicereqersion_1.37.1
prusaslicereq0.5.2
prusaslicereq1.0.0RC1
prusaslicereqersion_1.31.2
prusaslicereqersion_1.40.1-beta
prusaslicereqersion_1.42.0-alpha7

Name	Operator	Version
prusaslicer	eq	ersion_2.1.0
prusaslicer	eq	ersion_1.40.1-rc2
prusaslicer	eq	0.5.6
prusaslicer	eq	ersion_1.41.0-alpha3
prusaslicer	eq	ersion_1.37.1
prusaslicer	eq	0.5.2
prusaslicer	eq	1.0.0RC1
prusaslicer	eq	ersion_1.31.2
prusaslicer	eq	ersion_1.40.1-beta
prusaslicer	eq	ersion_1.42.0-alpha7