CVE-2020-28600: Buffer Overflow

Published May 10, 2021

Updated

An out-of-bounds write vulnerability exists in the importstl.cc:importstl() functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected Software

1 affected component

Openscad Openscad=2020.12-rc2

Event History

May 10, 2021

CVE Published

via MITRE·07:18 PM

Data Sourced

via MITRE·07:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2020-28600?

CVE-2020-28600 is an out-of-bounds write vulnerability in the import_stl.cc:import_stl() functionality of Openscad openscad-2020.12-RC2.

How does CVE-2020-28600 affect Openscad openscad-2020.12-RC2?

CVE-2020-28600 can be exploited by providing a specially crafted STL file, leading to code execution.

What is the severity of CVE-2020-28600?

CVE-2020-28600 has a severity value of 7.8, which is considered high.

How can I fix CVE-2020-28600?

To fix CVE-2020-28600, it is recommended to update Openscad to a version that is not affected by the vulnerability.

Where can I find more information about CVE-2020-28600?

More information about CVE-2020-28600 can be found at this reference: https://talosintelligence.com/vulnerability_reports/TALOS-2020-1224