description: An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
problem types: CWE-118: Incorrect Access of Indexable Resource ('Range Error')
affected:
{
vendor: ADMesh
product: ADMesh
versions:
version: Master Commit 767a105, status: affected
version: v0.98.4, status: affected
}
{
vendor: ADMesh
product: ADMesh
versions:
version: Master Commit 767a105, status: affected
version: v0.98.4, status: affected
}
{
vendor: ADMesh
product: ADMesh
versions:
version: Master Commit 767a105, status: affected
version: v0.98.4, status: affected
}
{
vendor: Slic3r
product: libslic3r
versions:
version: Master Commit b1a5500, status: affected
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: LOW
availabilityImpact: LOW
baseScore: 6.5
baseSeverity: MEDIUM
]