Description
An out-of-bounds read vulnerability exists in the GCode::extrude() functionality of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. A specially crafted stl file could lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
References (2)
Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://hackmd.io/KSI1bwGfSyO7T8UCf0HeTw
Product, Vendor Advisory x_refsource_misc
https://slic3r.org
Scores
CVSS v3
5.5
EPSS
0.0013
EPSS Percentile
32.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Details
CWE
CWE-125
Status
published
Products (1)
slic3r/libslic3r
1.3.0
Published
Mar 01, 2022
Tracked Since
Feb 18, 2026