CVE-2022-27438

CVE-2022-27438 affects Caphyon Advanced Installer 19.3 and earlier and products using the Advanced Updater. The root cause is a remote code execution vulnerability in the update check function via the CustomDetection parameter. Exploitation requires starting an affected installation to trigger th...

CVE-2020-28594

The CVE-2020-28594 entry details a use-after-free vulnerability in Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A crafted 3MF file triggers _3MF_Importer::_handle_end_model(), allowing potential code execution. Attacker-controlled input is the trigger, with impact described as ...

CVE-2020-28595

PrusaSlicer 2.2.0 and Master (commit 4b040b856) are affected by an out-of-bounds write in Obj.cpp load_obj() that can be triggered by a crafted .obj file, leading to code execution. The vulnerability arises during OBJ parsing in PrusaSlicer, where a loop over parsed faces and subsequent memory al...

CVE-2020-28596

PrusaSlicer 2.2.0 and Master (commit 4b040b856) are affected by a stack-based buffer overflow in ObjParser::objparse(). A fixed-size stack buffer (buf) is fed by fread in a loop, with insufficient bounds checking, enabling potential code execution via a crafted .obj file. The vulnerability is evi...

CVE-2020-28598

The CVE-2020-28598 entry concerns Prusa Research PrusaSlicer 2.2.0 and its Master branch (commit 4b040b856). The vulnerability is an out-of-bounds write in the Admesh stl_fix_normal_directions() functionality that can be triggered by a specially crafted AMF file, potentially enabling code executi...

CVE-2023-47268

PrusaSlicer through 2.6.1 is affected by a vulnerability in libslic3r’s GCode/PostProcessor.cpp where processing a crafted 3mf project file during slicing and G-code export can lead to arbitrary code execution on the host. Red Hat advisory confirms remote exploitation via specially crafted 3mf fi...