Improper array index validation in ADMesh
Priority HIGH 77CWE-118Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub. Impact type from CWE-129 and the CVSS impact.
Summary
An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.01061 64th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed admesh (PyPI): 0.98.5
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| ADMesh | ADMesh | Master Commit 767a105; v0.98.4 | — | No fix listed | CNA |
| ADMesh | ADMesh | Master Commit 767a105; v0.98.4 | — | No fix listed | CNA |
| ADMesh | ADMesh | Master Commit 767a105; v0.98.4 | — | No fix listed | CNA |
| Slic3r | libslic3r | Master Commit b1a5500 | — | No fix listed | CNA |
| — | admesh (PyPI) | before 0.98.5 | 0.98.5 | Patch available | GHSA-v5hv-4pw3-q6h9 |
- ADMesh VendorADMesh Affected Master Commit 767a105; v0.98.4 Fixed in — No fix listed CNA
- ADMesh VendorADMesh Affected Master Commit 767a105; v0.98.4 Fixed in — No fix listed CNA
- ADMesh VendorADMesh Affected Master Commit 767a105; v0.98.4 Fixed in — No fix listed CNA
- libslic3r VendorSlic3r Affected Master Commit b1a5500 Fixed in — No fix listed CNA
- admesh (PyPI) Vendor— Affected before 0.98.5 Fixed in 0.98.5 Patch available GHSA-v5hv-4pw3-q6h9
CPE configurations NVD · 3
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:admesh_project:admesh:0.98.4:*:*:*:*:*:*:* | 0.98.4 | Vulnerable | Admesh Project |
| cpe:2.3:a:admesh_project:admesh:2022-11-18:*:*:*:*:*:*:* | 2022-11-18 | Vulnerable | Admesh Project |
| cpe:2.3:a:slic3r:libslic3r:b1a5500:*:*:*:*:*:*:* | b1a5500 | Vulnerable | Slic3r |
- cpe:2.3:a:admesh_project:admesh:0.98.4:*:*:*:*:*:*:* Versions 0.98.4 Vulnerable ·Admesh Project
- cpe:2.3:a:admesh_project:admesh:2022-11-18:*:*:*:*:*:*:* Versions 2022-11-18 Vulnerable ·Admesh Project
- cpe:2.3:a:slic3r:libslic3r:b1a5500:*:*:*:*:*:*:* Versions b1a5500 Vulnerable ·Slic3r
Remediation
- Fix · GHSA-v5hv-4pw3-q6h9 admesh (PyPI) Fixed in 0.98.5 Advisory →
Vendor assessments
Timeline
- 2026-10-02 Threatist record created from CVE-2022-38072
- 2026-10-03 Alias added: GHSA-v5hv-4pw3-q6h9
References
More Slic3r Libslic3r vulnerabilities
- TI-2022-17029 Out-of-bounds write in Slic3r libslic3r CVSS 3.1HIGH 8.1
- TI-2020-17323 Improper input validation in Slic3r CVSS 3.1MEDIUM 6.5
- TI-2020-17322 Improper input validation in Slic3r CVSS 3.1MEDIUM 6.5
- TI-2021-20349 An out-of-bounds read vulnerability exists in the GCode::extrude() functionality of… CVSS 3.1MEDIUM 5.5
- TI-2021-20348 A memory leakage flaw exists in the class PerimeterGenerator of Slic3r libslic3r 1.3.0… CVSS 3.1MEDIUM 5.5
Sources
- CVE-2022-38072 · CVE Program
- CVE-2022-38072 · NVD
- FIRST EPSS
- GHSA-v5hv-4pw3-q6h9 · GitHub Advisory Database · CC BY 4.0
- CVE-2022-38072 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences