VulnerabilityModified
CVE-2021-45847
Several missing input validations in the 3MF parser component of Slic3r libslic3r 1.3.0 can each allow an attacker to cause an application crash using a crafted 3MF input file.
MEDIUM 5.5EPSS 0.77%
Does this matter?
Lower severity and a low EPSS score (0.77%). Track it; it rarely justifies an emergency change on its own.
Description
Several missing input validations in the 3MF parser component of Slic3r libslic3r 1.3.0 can each allow an attacker to cause an application crash using a crafted 3MF input file.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- EPSS
- 0.77% probability · 54th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-476
- Affected
- slic3r/slic3r
- Source
- cve@mitre.org
References
- https://github.com/slic3r/Slic3r/issues/5118Issue Tracking, Mitigation, Patch, Third Party Advisory
- https://github.com/slic3r/Slic3r/issues/5119Issue Tracking, Mitigation, Patch, Third Party Advisory
- https://github.com/slic3r/Slic3r/issues/5120Issue Tracking, Mitigation, Patch, Third Party Advisory
- https://github.com/slic3r/Slic3r/issues/5118Issue Tracking, Mitigation, Patch, Third Party Advisory
- https://github.com/slic3r/Slic3r/issues/5119Issue Tracking, Mitigation, Patch, Third Party Advisory
- https://github.com/slic3r/Slic3r/issues/5120Issue Tracking, Mitigation, Patch, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.