CVE-2022-38072

CVSS V2 None CVSS V3 None
Description
An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Overview
  • CVE ID
  • CVE-2022-38072
  • Assigner
  • talos-cna@cisco.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-04-03T16:15:07
  • Last Modified Date
  • 2023-04-09T02:13:14
Weakness Enumerations
CWE URL
CWE-129 http://cwe.mitre.org/data/definitions/129.html
CWE-118 http://cwe.mitre.org/data/definitions/118.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:admesh_project:admesh:0.98.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:admesh_project:admesh:2022-11-18:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:slic3r:libslic3r:b1a5500:*:*:*:*:*:*:* 1 OR
References
Reference URL Reference Tags
https://github.com/admesh/admesh/commit/5fab257268a0ee6f832c18d72af89810a29fbd5f Patch
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1594 Exploit Technical Description Third Party Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-38072
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38072
History
Created Old Value New Value Data Type Notes
2023-04-17 04:02:41 Added to TrackCVE
2023-04-17 04:02:44 Weakness Enumeration new