CVE-2022-38072

An improper array index validation vulnerability exists in the stlfixnormaldirections functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

PYSEC-2023-263

An improper array index validation vulnerability exists in the stlfixnormaldirections functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2022-38072

An improper array index validation vulnerability exists in the stlfixnormaldirections functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

Vulnerability Spotlight: Buffer overflow vulnerability in ADMesh library

Francesco Benvenuto of Cisco Talos discovered this vulnerability. Cisco Talos recently discovered an improper array index validation vulnerability in a functionality of the ADMesh library. ADMesh is a C library used to process 3-D triangular meshes. Talos found an improper array index validation...

CVE-2022-38072

An improper array index validation vulnerability exists in the stlfixnormaldirections functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2022-38072

CVE-2022-38072 affects ADMesh (Master commit 767a105 and v0.98.4). The vulnerability resides in the stl_fix_normal_directions function due to improper array index validation, leading to a heap buffer overflow when processing crafted STL files. An attacker can trigger this via a malicious STL inpu...

CVE-2022-38072

An improper array index validation vulnerability exists in the stlfixnormaldirections functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2022-38072

An improper array index validation vulnerability exists in the stlfixnormaldirections functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

OSV-2023-273 Heap-buffer-overflow in add_complete_typeobj

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57614 Crash type: Heap-buffer-overflow READ 8 Crash state: addcompletetypeobj ddsixttypeaddtypeobj ddsitypeaddtypeobj...

OSV-2023-272 Heap-buffer-overflow in unsigned long simdutf::haswell::convert_masked_utf8_to_utf16<

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57632 Crash type: Heap-buffer-overflow WRITE Crash state: unsigned long simdutf::haswell::convertmaskedutf8toutf16 simdutf::haswell::implementation::convertutf8toutf16le roundtrip.cc...

PT-2023-35749 · Simdutf · Simdutf

Name of the Vulnerable Software and Affected Versions: simdutf affected versions not specified Description: The issue is related to a heap buffer overflow error. It occurs in the simdutf::haswell::convert masked utf8 to utf16 function, specifically in the simdutf::haswell::implementation::convert...

ADMesh stl_fix_normal_directions improper array index validation vulnerability

Talos Vulnerability Report TALOS-2022-1594 ADMesh stlfixnormaldirections improper array index validation vulnerability April 3, 2023 CVE Number CVE-2022-38072 SUMMARY An improper array index validation vulnerability exists in the stlfixnormaldirections functionality of ADMesh Master Commit 767a10...

PT-2023-35750 · Git +1 · Cyclonedds

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the functions add complete typeobj, ddsi xt type add...

PT-2023-36075 · Admesh · Admesh

Name of the Vulnerable Software and Affected Versions: ADMesh versions prior to the fixed version Description: The issue is related to improper array index validation in the stl fix normal directions functionality. This can be exploited by providing a specially-crafted stl file, leading to a heap...

OSV-2023-271 Heap-buffer-overflow in bit_utf8_to_TU

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57589 Crash type: Heap-buffer-overflow READ 1 Crash state: bitutf8toTU dxfheaderread dwgreaddxf...

OSV-2023-270 Heap-buffer-overflow in bit_utf8_to_TU

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57587 Crash type: Heap-buffer-overflow WRITE 2 Crash state: bitutf8toTU jsonwstring jsonAppInfo...

OSV-2023-269 Heap-buffer-overflow in bit_utf8_to_TU

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57586 Crash type: Heap-buffer-overflow READ 1 Crash state: bitutf8toTU dynapisethelper dwgdynapientitysetvalue...

PT-2023-35748 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions bit utf8 to TU, dxf header read, and dwg read dxf. No information...

Fedora 38 : mingw-binutils (2023-15c6e4be28)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-15c6e4be28 advisory. Backport fix for CVE-2023-1579. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

PT-2023-35747 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 2 crash has been reported, involving functions such as bit utf8 to TU, json wstring, and json AppInfo. No information is...