Skip to content
Sign in
8.8 High

CVE-2020-28600 An out-of-bounds write vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad…

Description

An out-of-bounds write vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected products and versions

Product Affected versions Fixed in
Openscad Versions not published

Other CVEs of Openscad

The 4 CVEs of Openscad →
CVE-2022-0496 A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily malformed!)… Not rated CVE-2022-0497 A vulnerbiility was found in Openscad, where a .scad file with no trailing newline could cause an out-of-bounds read… Not rated CVE-2020-28599 A stack-based buffer overflow vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad… 8.8 High
Track this CVE