Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the `igl::MshLoader::parse_nodes` function while handling a `binary` `.msh` file.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://talosintelligence.com/vulnerability_reports/TALOS-2024-1926 | Mitigation Third Party Advisory |
| https://talosintelligence.com/vulnerability_reports/TALOS-2024-1926 | Mitigation Third Party Advisory |
| https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1926 | Mitigation Third Party Advisory |
| https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1926 | Mitigation Third Party Advisory |
Configurations
History
12 Feb 2025, 18:43
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Libigl libigl
Libigl |
|
| References | () https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1926 - Mitigation, Third Party Advisory | |
| References | () https://talosintelligence.com/vulnerability_reports/TALOS-2024-1926 - Mitigation, Third Party Advisory | |
| CWE | ||
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
| CPE | cpe:2.3:a:libigl:libigl:2.5.0:*:*:*:*:*:*:* |
10 Jun 2024, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
28 May 2024, 14:59
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-28 14:15
Updated : 2025-02-12 18:43
NVD link : CVE-2024-23947
Mitre link : CVE-2024-23947
JSON object : View
Products Affected
libigl
- libigl
CWE
No CWE.