CVE-2024-23948 Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide....
HighCVSS 8.8
EPSS 0.92%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the igl::MshLoader::parse_nodes function while handling an ascii.msh` file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/slic3r-prusa(Ubuntu:22.04) | All versions | No fix listed |
| libigl | = v2.5.0 | No fix listed |
| libigl | = 2.5.0 | No fix listed |
| ubuntu/slic3r-prusa(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/slic3r-prusa(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/slic3r-prusa(Ubuntu:26.10) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- https://talosintelligence.com/vulnerability_reports/TALOS-2024-1926 mitigation third-party-advisory
- www.talosintelligence.com mitigation third-party-advisory