CVE-2022-38072
Assigner: talos
Published: 2023-04-03T15:07:21.146Z
State: PUBLISHED
affected: vendor: ADMesh
product: ADMesh
versions: version: Master Commit 767a105
status: affected
version: v0.98.4
status: affected
vendor: ADMesh
product: ADMesh
versions: version: Master Commit 767a105
status: affected
version: v0.98.4
status: affected
vendor: ADMesh
product: ADMesh
versions: version: Master Commit 767a105
status: affected
version: v0.98.4
status: affected
vendor: Slic3r
product: libslic3r
versions: version: Master Commit b1a5500
status: affected
descriptions: value: An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
problemTypes: descriptions: description: CWE-118: Incorrect Access of Indexable Resource ('Range Error')
type: CWE
cweId: CWE-118
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: LOW
baseScore: 6.5
baseSeverity: MEDIUM
credits: value: Discovered by Francesco Benvenuto of Cisco Talos.