CVE-2020-28598

2021-07-0812:15:09

Google

osv.dev

7.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%

JSON

An out-of-bounds write vulnerability exists in the Admesh stl_fix_normal_directions() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted AMF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

CPENameOperatorVersion
prusaslicereqersion_2.1.0
prusaslicereqersion_1.40.1-rc2
prusaslicereq0.5.6
prusaslicereqersion_1.41.0-alpha3
prusaslicereqersion_1.37.1
prusaslicereq0.5.2
prusaslicereq1.0.0RC1
prusaslicereqersion_1.31.2
prusaslicereqersion_1.40.1-beta
prusaslicereqersion_1.42.0-alpha7

Name	Operator	Version
prusaslicer	eq	ersion_2.1.0
prusaslicer	eq	ersion_1.40.1-rc2
prusaslicer	eq	0.5.6
prusaslicer	eq	ersion_1.41.0-alpha3
prusaslicer	eq	ersion_1.37.1
prusaslicer	eq	0.5.2
prusaslicer	eq	1.0.0RC1
prusaslicer	eq	ersion_1.31.2
prusaslicer	eq	ersion_1.40.1-beta
prusaslicer	eq	ersion_1.42.0-alpha7