CVE-2021-44962

CVE-2021-44962 describes an out-of-bounds read in the GCode::extrude() function of Slic3r libslic3r 1.3.0 and the Master Commit b1a5500. A specially crafted STL file could trigger information disclosure, with an attacker able to provide the malicious file to exploit the vulnerability. The connect...

CVE-2020-28591

CVE-2020-28591 describes an out-of-bounds read in Slic3r’s AMFParserContext::endElement() inside libslic3r 1.3.0 and Master Commit 92abbc42. A crafted AMF file can trigger information disclosure. Public sources in connected documents confirm the vulnerable component/file and its impact but do not...

CVE-2021-44961

A memory leakage flaw exists in the class PerimeterGenerator of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. Specifically crafted STL files can exhaust available memory, allowing an attacker to trigger the vulnerability by supplying malicious files. The description does not specify a concret...

CVE-2022-38072

CVE-2022-38072 affects ADMesh (Master commit 767a105 and v0.98.4). The vulnerability resides in the stl_fix_normal_directions function due to improper array index validation, leading to a heap buffer overflow when processing crafted STL files. An attacker can trigger this via a malicious STL inpu...

CVE-2020-28590

The CVE-2020-28590 entry concerns an out-of-bounds read in the Obj File TriangleMesh::TriangleMesh() function of libslic3r (Slic3r) version 1.3.0 and Master Commit 92abbc42. A specially crafted OBJ file could trigger information disclosure. The vulnerability originates from the TriangleMesh() imp...

CVE-2022-36788

CVE-2022-36788 affects libslic3r/libSlic3r (Slic3r) 1.3.0 and Master Commit b1a5500, via a heap-based buffer overflow in the TriangleMesh clone functionality triggered by specially crafted STL files. The vulnerability is a heap overflow in the TriangleMesh clone path, with potential impact to con...