CVE-2021-45846: Null Pointer Dereference

Published Jan 25, 2022

Updated

A flaw in the AMF parser of Slic3r libslic3r 1.3.0 allows an attacker to cause an application crash using a crafted AMF document, where a metadata tag lacks a "type" attribute.

Affected Software

1 affected component

Slic3r Slic3r=1.3.0

Event History

Jan 25, 2022

CVE Published

via MITRE·01:20 PM

Data Sourced

via MITRE·01:20 PM

Description

Frequently Asked Questions

What is CVE-2021-45846?

CVE-2021-45846 is a vulnerability in the AMF parser of Slic3r libslic3r 1.3.0 that allows an attacker to cause an application crash using a crafted AMF document.

How does CVE-2021-45846 affect Slic3r libslic3r 1.3.0?

CVE-2021-45846 affects Slic3r libslic3r 1.3.0 by allowing an attacker to cause an application crash using a crafted AMF document.

What is the severity of CVE-2021-45846?

The severity of CVE-2021-45846 is medium with a score of 5.5.

How can CVE-2021-45846 be exploited?

CVE-2021-45846 can be exploited by using a crafted AMF document with a metadata tag lacking a "type" attribute.

Is there a fix available for CVE-2021-45846?

Currently, there is no available fix for CVE-2021-45846. It is recommended to update to a patched version of Slic3r libslic3r when it becomes available.