CVE-2020-28595

An out-of-bounds write vulnerability exists in the Obj.cpp loadobj functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2020-28595

PrusaSlicer 2.2.0 and Master (commit 4b040b856) are affected by an out-of-bounds write in Obj.cpp load_obj() that can be triggered by a crafted .obj file, leading to code execution. The vulnerability arises during OBJ parsing in PrusaSlicer, where a loop over parsed faces and subsequent memory al...