REDHAT-BUG-2050699: Medium severity Openscad Openscad vulnerability
Published Feb 4, 2022
·Updated
A .scad file with no trailing newline may cause an out-of-bounds read during parsing of annotations.
References:
https://github.com/openscad/openscad/issues/4043 https://github.com/openscad/openscad/pull/4044
Affected Software
1 affected component
Openscad Openscad
Event History
Feb 4, 2022
Data Sourced
via Red Hat·01:39 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2050699?
The severity of REDHAT-BUG-2050699 is classified as moderate due to the potential for out-of-bounds reads.
2
How do I fix REDHAT-BUG-2050699?
To fix REDHAT-BUG-2050699, ensure that .scad files contain a trailing newline before parsing.
3
What software is affected by REDHAT-BUG-2050699?
REDHAT-BUG-2050699 affects OpenSCAD software.
4
What issue does REDHAT-BUG-2050699 cause during parsing?
REDHAT-BUG-2050699 may cause an out-of-bounds read during the parsing of annotations.
5
Is there a workaround for REDHAT-BUG-2050699?
A workaround for REDHAT-BUG-2050699 is to manually add a trailing newline to .scad files before use.