CVE-2024-22181

An out-of-bounds write vulnerability exists in the readNODE functionality of libigl v2.5.0. A specially crafted .node file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2023-35951

The CVE-2023-35951 entry concerns libigl v2.4.0. Affected component: readOFF.cpp responsible for parsing OFF files. Issue: multiple stack-based buffer overflow vulnerabilities when processing specially crafted .off files, potentially enabling arbitrary code execution. Documented impact aligns wit...

CVE-2023-35950

CVE-2023-35950 affects libigl v2.4.0, specifically the readOFF.cpp component that parses the OFF file header. The issue is described as multiple stack-based buffer overflows triggered by specially crafted .off files, potentially enabling arbitrary code execution. Exploitation is indicated to be l...

CVE-2023-35952

CVE-2023-35952 affects libigl v2.4.0. The vulnerability is a set of stack-based buffer overflows in the readOFF.cpp functionality, specifically in the code that parses comments within the geometric faces section of an OFF file. A specially crafted .off file can trigger a buffer overflow, potentia...

CVE-2023-35949

CVE-2023-35949 affects libigl v2.4.0. The vulnerability lies in the readOFF.cpp code path that parses OFF files; a specially crafted .off file can trigger a stack-based buffer overflow. This can lead to arbitrary code execution within the vulnerable process. Connected sources corroborate the same...

CVE-2023-35953

CVE-2023-35953 refers to multiple stack-based buffer overflow vulnerabilities in the libigl 2.4.0 readOFF.cpp parser for OFF files. A specially crafted .off file can trigger a buffer overflow in the code path that parses comments within the geometric vertices section, with the description indicat...

CVE-2023-49600

CVE-2023-49600 affects libigl (v2.5.0) with an out-of-bounds write in PlyFile::ply_cast_ascii, which can trigger a heap buffer overflow when processing a crafted .ply file. Cisco Talos reports vulnerability in libigl and references TALOS-2023-1879, indicating a related heap/buffer issue; Nessus a...

CVE-2024-23947

The CVE-2024-23947 issue affects libigl v2.5.0, specifically the igl::MshLoader::parse_nodes function when handling binary .msh files. The vulnerability arises from improper array index validation, leading to an out-of-bounds write. The available sources describe the affected component and failur...

CVE-2024-23950

The CVE-2024-23950 entry applies to libigl v2.5.0, where the readMSH functionality is affected. Specifically, the vulnerability lies in igl::MshLoader::parse_element_field while processing a binary .msh file, leading to an out-of-bounds write due to improper array index validation. The issue is t...

CVE-2024-23949

CVE-2024-23949 affects libigl v2.5.0, specifically the readMSH/file parsing path: igl::MshLoader::parse_node_field when handling an ascii/.msh file. The root cause is improper array index validation, leading to an out-of-bounds write with a specially crafted .msh file. No explicit remediation or ...

CVE-2024-23948

CVE-2024-23948 affects libigl v2.5.0 in readMSH (igl::MshLoader::parse_nodes) when processing ascii.msh files. A specially crafted .msh can cause an out-of-bounds write, per multiple sources. Attacker-controlled input is required to trigger the issue; no exploitation specifics or patch/version re...

CVE-2024-23951

CVE-2024-23951 affects libigl v2.5.0. The vulnerability lies in the readMSH functionality, specifically igl::MshLoader::parse_element_field when processing an ascii.msh file, where improper array index validation can trigger an out-of-bounds write. Attackers can supply a malformed .msh file to ex...

CVE-2024-24685

CVE-2024-24685 affects the open‑source geometry library libigl, specifically the readOFF parser in version v2.5.0. A specially crafted .off file can trigger a stack‑based buffer overflow by exploiting how comments in the vertex section are parsed during readOFF. The connected documents confirm th...

CVE-2024-24583

CVE-2024-24583 affects libigl v2.5.0. The vulnerability is an out-of-bounds read in readMSH when processing MshLoader::ELEMENT_TRI, triggered by a specially crafted .msh file. Multiple connected sources (NVD/NVV publications and related CVE aggregations) report this exact issue and its associatio...

CVE-2024-24584

CVE-2024-24584 : The connected documents confirm multiple out-of-bounds read vulnerabilities in libigl v2.5.0, specifically in the readMSH functionality when processing MshLoader::ELEMENT_TET. A specially crafted .msh file can trigger this read past array bounds. Exploit details, vulnerable versi...

CVE-2024-24686

CVE-2024-24686 concerns multiple stack-based buffer overflows in the readOFF parser of libigl v2.5.0. The vulnerability arises when parsing comments within the faces section of an .off file, which a malicious file can trigger. Affected component: libigl’s readOFF function (libigl v2.5.0). Impacts...

CVE-2024-22181

CVE-2024-22181 concerns libigl v2.5.0, where the readNODE function is vulnerable to an out-of-bounds write triggered by a specially crafted .node file. Multiple connected sources confirm the vulnerability exists in this library/version, with attacker-provided files as the trigger. The TALOS advis...

CVE-2024-24684

libigl v2.5.0 readOFF contains multiple stack-based buffer overflows in header parsing. A 1000-byte fixed-size header buffer and a unsafe fscanf on the header and on comment lines can overflow when processing specially crafted .off files, enabling potential memory corruption. Connected reports (T...

CVE-2024-29072

The CVE refers to a privilege-escalation flaw in Foxit Reader 2024.2.0.25138 caused by improper certification validation of the updater executable before it runs. The issue allows a low-privilege user to trigger an update action, potentially elevating privileges (local access, user interaction re...

CVE-2024-5428

The CVE-2024-5428 entry applies to SourceCodester Simple Online Bidding System 1.0. The vulnerability is in the HTTP POST Request Handler, specifically the save_product function in /admin/index.php?page=manage_product, where a cross-site request forgery (CSRF) can be triggered remotely. Credible ...