high8.8
CVE-2024-23951
Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0.
Impact
Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the `igl::MshLoader::parse_element_field` function while handling an `ascii`.msh` file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libigl | Libigl | Version 2.5.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://talosintelligence.com/vulnerability_reports/TALOS-2024-1926
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1926
- https://talosintelligence.com/vulnerability_reports/TALOS-2024-1926
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1926