TI-2023-18013 Aliases CVE-2023-35952

Stack-based buffer overflow in libigl

LOW 37CWE-121Published 2024-05-28 · Updated 2025-02-13

Key facts

Attack vector: Local
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-121 and the CVSS impact.

Summary

Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffer overflow. An attacker can arbitrary code execution to trigger these vulnerabilities.This vulnerability exists within the code responsible for parsing comments within the geometric faces section within an OFF file.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00495 42nd percentileScored 2026-11-07

Public exploit Yes 2 exploit referencesTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
libigl	libigl	v2.4.0; v2.5.0	—	No fix listed	CNA

libigl Vendorlibigl Affected v2.4.0; v2.5.0 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:libigl:libigl:2.4.0:::::::*	2.4.0	Vulnerable	libigl
cpe:2.3:a:libigl:libigl:2.5.0:::::::*	2.5.0	Vulnerable	libigl

cpe:2.3:a:libigl:libigl:2.4.0:*:*:*:*:*:*:* Versions 2.4.0 Vulnerable ·libigl
cpe:2.3:a:libigl:libigl:2.5.0:*:*:*:*:*:*:* Versions 2.5.0 Vulnerable ·libigl

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product

Red Hat

Timeline

2026-10-02 Threatist record created from CVE-2023-35952

References

Exploit 2

TI-2024-15931 Out-of-bounds write in libigl CVSS 3.1HIGH 8.8
TI-2024-15930 Out-of-bounds write in libigl CVSS 3.1HIGH 8.8
TI-2023-27090 Heap-based buffer overflow in libigl CVSS 3.1HIGH 8.1
TI-2024-16218 Stack-based buffer overflow in libigl CVSS 3.1HIGH 7.8
TI-2023-18011 Stack-based buffer overflow in libigl CVSS 3.1HIGH 7.8
TI-2024-15932 Out-of-bounds write in libigl CVSS 3.1HIGH 8.8

See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences