Vulnerability Spotlight: Multiple vulnerabilities in Prusa Slicer
Summary: Cisco Talos discovered two out-of-bounds write vulnerabilities in Prusa Research's PrusaSlicer, an open-source 3-D printer slicing program, affecting version 2.2.0 and Master commit 4b040b856. Specially crafted OBJ and AMF files can trigger the flaws in Obj.cpp load_obj() (CVE-2020-28595) and Objparser::objparse() (CVE-2020-28598) to cause an out-of-bounds write or buffer overflow and execute code on the victim machine.
Why it matters: A malicious 3-D model file is enough to execute code on a workstation running PrusaSlicer 2.2.0, and Talos published Snort rules 56727, 56728, 56847 and 56848 to detect exploitation attempts.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2020-28595CVE-2020-28598
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026