CVE-2022-38072
Medium
Description
An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
SeverityMedium
CVSS6.5
Exploit probability—
ProductAdmesh
PublishedApr 3, 2023
First seenApr 3, 2023
Weakness typeCWE-118CWE-118
How to fix
Update
- admesh0.98.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| admesh_project admesh | 0.98.4, 2022-11-18 | — |
| slic3r libslic3r | b1a5500 | — |
| admeshPyPI | v < 0.98.5, No range specified | 0.98.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.