CVE-2020-28595: Heap-based Buffer Overflow

An out-of-bounds write vulnerability exists in the Obj.cpp loadobj functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

Prusa Research PrusaSlicer Buffer Error Vulnerability

A buffer error vulnerability exists in Prusa Research PrusaSlicer that originates when a networked system or product performs an operation in memory without properly validating data boundaries, resulting in an incorrect read or write operation being performed to an associated other memory locatio...

CVE-2020-28596: Out-of-bounds Write

A stack-based buffer overflow vulnerability exists in the Objparser::objparse functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...

Prusa Research PrusaSlicer Buffer Error Vulnerability

A buffer error vulnerability exists in Prusa Research PrusaSlicer that originates when a networked system or product performs an operation in memory without properly validating data boundaries, resulting in an incorrect read or write operation being performed to an associated other memory locatio...

PT-2021-11565 · Prusa +1 · Prusaslicer +1

Name of the Vulnerable Software and Affected Versions: PrusaSlicer versions 2.2.0 and Master commit 4b040b856 Description: An out-of-bounds write issue exists in the load obj functionality of the Obj.cpp file. This can be triggered by a specially crafted obj file, potentially leading to code...

PT-2021-11566 · Prusa +1 · Prusaslicer +1

Name of the Vulnerable Software and Affected Versions: PrusaSlicer versions 2.2.0 and Master commit 4b040b856 Description: A stack-based buffer overflow issue exists in the Objparser::objparse functionality. This can be triggered by a specially crafted obj file, potentially leading to code...

Vulnerability Spotlight: Multiple vulnerabilities in PrusaSlicer

Lilith of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered two out-of-bounds write vulnerabilities in Prusa Research’s PrusaSlicer. Prusa Slicer is an open-source 3-D printer slicing program forked off Slic3r that can convert various 3-D model fil...

Prusa Research PrusaSlicer _3MF_Importer::_handle_end_model() use-after-free vulnerability

Summary A use-after-free vulnerability exists in the 3MFImporter::handleendmodel functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability. Tested...