← Back

CVE-2022-38072

nvd nist
Published: Apr 3, 2023Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

Affected (3)

Admesh Project
1 product
Admesh
Slic3r
1 product
Libslic3r
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Admesh Project
Admesh
Version 0.98.4
Admesh
Version 2022-11-18
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Libslic3r
Version b1a5500

Related CWEs

CWE-118
Incorrect Access of Indexable Resource ('Range Error')
The product does not restrict or incorrectly restricts operations within the boundaries of a resource that is accessed using an index or pointer, such as memory or files.
CWE-129
Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

References (5)

Source: talos-cna@cisco.com
Patch
Source: talos-cna@cisco.com
ExploitTechnical DescriptionThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitTechnical DescriptionThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.