Описание
vox2mesh 1.0 has stack-overflow in main.cpp, this is stack-overflow caused by incorrect use of memcpy() funciton. The flow allows an attacker to cause a denial of service (abort) via a crafted file.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:vox2mesh_project:vox2mesh:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 26%
0.00089
Низкий
5.5 Medium
CVSS3
Дефекты
CWE-787
CWE-787
Связанные уязвимости
CVSS3: 5.5
github
почти 3 года назад
vox2mesh 1.0 has stack-overflow in main.cpp, this is stack-overflow caused by incorrect use of memcpy() funciton. The flow allows an attacker to cause a denial of service (abort) via a crafted file.
EPSS
Процентиль: 26%
0.00089
Низкий
5.5 Medium
CVSS3
Дефекты
CWE-787
CWE-787