Prusa Research PrusaSlicer 2.2.0 OBJ File Obj.cpp load_obj out-of-bounds write

Summaryinfo

A vulnerability has been found in Prusa Research PrusaSlicer 2.2.0 and classified as critical. The affected element is the function load_obj of the file Obj.cpp of the component OBJ File Handler. Performing a manipulation results in out-of-bounds write. This vulnerability is known as CVE-2020-28595. No exploit is available.

Detailsinfo

A vulnerability, which was classified as critical, was found in Prusa Research PrusaSlicer 2.2.0. This affects the function load_obj of the file Obj.cpp of the component OBJ File Handler. The manipulation with an unknown input leads to a out-of-bounds write vulnerability. CWE is classifying the issue as CWE-787. The product writes data past the end, or before the beginning, of the intended buffer. This is going to have an impact on confidentiality, integrity, and availability.

The weakness was published 02/11/2021 as TALOS-2020-1219. The advisory is shared at talosintelligence.com. This vulnerability is uniquely identified as CVE-2020-28595. Technical details are known, but no exploit is available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Prusa Research

Name

• PrusaSlicer

Version

• 2.2.0

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion