CVE-2022-38072

Katalog CVE

CVSS 8.8 · High EPSS 1,1%

Kerentanan Incorrect Access of Indexable Resource ('Range Error') pada admesh project admesh, libslic3r. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

Rincian

Terbit di NVD

3 April 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-118: Incorrect Access of Indexable Resource ('Range Error')
CWE-129: Improper Validation of Array Index

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 63,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/admesh/admesh/commit/5fab257268a0ee6f832c18d72af89810a29fbd5f patch
• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1594 exploit · deskripsi teknis · advisory pihak ketiga
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1594