TI-2020-17331 CVE-2020-28599 · GHSA-fw35-ggqm-93fg
Stack-based buffer overflow in Openscad
Priority LOW 38
A stack-based buffer overflow vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad openscad-2020.12-RC2.
Openscad
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Openscad records in CISA KEVNo Openscad vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2020-17332 CVE-2020-28600 · GHSA-ppjh-5v74-v6qq
Memory corruption in Openscad
Priority LOW 37
An out-of-bounds write vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad openscad-2020.12-RC2.
TI-2022-00418 CVE-2022-0497 · GHSA-326h-gchx-f5r4
Out-of-bounds read in openscad
Priority LOW 32
A vulnerbiility was found in Openscad, where a .scad file with no trailing newline could cause an out-of-bounds read during parsing of annotations.
TI-2022-00417 CVE-2022-0496 · GHSA-h75g-6869-mgjj
Memory corruption in openscad
Priority LOW 25
A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily malformed!) properties may cause an out-of-bounds memory access when imported using import().