CVE-2020-28591: An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement() functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. A…

PriorityP433medium6.5CVSS 3.1

AVNACLPRNUIRSUCHINAN

EPSS

1.90%

77.6th percentile

An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement() functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. A specially crafted AMF file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
debian	slic3r	< slic3r 1.3.0+dfsg1-4 (bookworm)	slic3r 1.3.0+dfsg1-4 (bookworm)
fedoraproject	fedora	—	—
fedoraproject	fedora	—	—
fedoraproject	fedora	—	—
slic3r	libslic3r	—	—
slic3r	slic3r	>= 0 < 1.3.0+dfsg1-4	1.3.0+dfsg1-4
slic3r	slic3r	>= 0 < 1.3.0+dfsg1-4	1.3.0+dfsg1-4

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

nvdv3.08.6HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N

osv6.5MEDIUM

vendor_debian6.5LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.