Vulnerability Spotlight: Out-of-bounds read vulnerability in Slic3r could lead to information disclosure
Summary: Cisco Talos discovered an out-of-bounds read vulnerability in Slic3r's libslic3r, tracked as TALOS-2020-1213/CVE-2020-28590, in the Obj File TriangleMesh::TriangleMesh() functionality of version 1.3.0 and Master Commit 92abbc42. A specially crafted obj file sent to a target triggers the out-of-bounds condition and could lead to information disclosure, and Talos confirmed the affected versions and published Snort rules 56721 and 56722 to detect exploitation attempts.
What you should know: The attack path is a single obj file handed to a user of an open-source 3-D printing toolbox, so the exposure sits with anyone who opens model files from outside sources, and the disclosure risk is information leaving the system rather than a crash.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-28590
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026