Vulnerability Details : CVE-2021-45847

Several missing input validations in the 3MF parser component of Slic3r libslic3r 1.3.0 can each allow an attacker to cause an application crash using a crafted 3MF input file.
Published 2022-01-25 14:15:09
Updated 2022-01-28 19:33:59
Source MITRE
View at NVD,   CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2021-45847

Probability of exploitation activity in the next 30 days: 0.07%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 27 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2021-45847

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Source
4.3
MEDIUM AV:N/AC:M/Au:N/C:N/I:N/A:P
8.6
2.9
nvd@nist.gov
5.5
MEDIUM CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
1.8
3.6
nvd@nist.gov

CWE ids for CVE-2021-45847

  • A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
    Assigned by: nvd@nist.gov (Primary)

References for CVE-2021-45847

  • https://github.com/slic3r/Slic3r/issues/5118
    NULL pointer dereference in 3MF XML parser (vertex tag without x/y/z attribute) · Issue #5118 · slic3r/Slic3r · GitHub
    Issue Tracking;Mitigation;Patch;Third Party Advisory
  • https://github.com/slic3r/Slic3r/issues/5120
    NULL pointer dereference in 3MF XML parser (slic3r:volume tag without ts/te/modifier attribute) · Issue #5120 · slic3r/Slic3r · GitHub
    Issue Tracking;Mitigation;Patch;Third Party Advisory
  • https://github.com/slic3r/Slic3r/issues/5119
    NULL pointer dereference in 3MF XML parser (triangle tag without v1/v2/v3 attribute) · Issue #5119 · slic3r/Slic3r · GitHub
    Issue Tracking;Mitigation;Patch;Third Party Advisory

Products affected by CVE-2021-45847

This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!