Prusa3D vulnerabilities
6 vulnerabilities
Known vulnerabilities in Prusa3D products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Prusaslicer6 vulnerabilities
HighCVE-2020-28596debian · slic3r-prusa +2 moredebian slic3r-prusaA stack-based buffer overflow vulnerability exists in the Objparser::objparse() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.EPSS1.52%HighCVE-2020-28594debian · slic3r-prusa +2 moredebian slic3r-prusaA use-after-free vulnerability exists in the _3MF_Importer::_handle_end_model() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.EPSS1.42%HighCVE-2020-28595debian · slic3r-prusa +2 moredebian slic3r-prusaAn out-of-bounds write vulnerability exists in the Obj.cpp load_obj() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.EPSS1.55%HighCVE-2020-28598debian · slic3r-prusa +2 moredebian slic3r-prusaAn out-of-bounds write vulnerability exists in the Admesh stl_fix_normal_directions() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted AMF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.EPSS1.27%HighCVE-2022-274383cx · call_flow_designer +69 more3cx call_flow_designerCaphyon Ltd Advanced Installer 19.3 and earlier and many products that use the updater from Advanced Installer (Advanced Updater) are affected by a remote code execution vulnerability via the CustomDetection parameter in the update check function. To exploit this vulnerability, a user must start an affected installation to trigger the update check.EPSS1.98%MediumCVE-2023-47268debian · slic3r-prusa +1 moredebian slic3r-prusaIn libslic3r/GCode/PostProcessor.cpp in Prusa PrusaSlicer through 2.6.1, a crafted 3mf project file can execute arbitrary code on a host where the project is sliced and G-code exported.EPSS0.72%