Vulnerability Spotlight: Buffer overflow vulnerability in Any Cubic Chitubox plugin

Summary: Carl Hurd of Cisco Talos discovered a heap-based buffer overflow vulnerability, TALOS-2021-1376 (CVE-2021-21948), in the Chitubox AnyCubic plugin that triggers when a user opens a specially crafted .gf file. Talos disclosed the issue despite no official fix being available, and named AnyCubic Chitubox AnyCubic Plugin version 1.0.0 and Chitubox Basic version 1.8.1 as affected.
Key Takeaway: The plugin converts slicer output into files used directly for all printer functionality, so a single opened .gf file is the whole attack path - and Talos is publishing with no fix in hand, leaving detection to Snort rules 58233 and 58234.

Read the original at Cisco Talos ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2021-21948
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026