High
slic3r-prusa — security advisory
Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffer overflow. An attacker can arbitrary code execution to trigger these vulnerabilities.This vulnerability exists within the code responsible for parsing comments within the geometric vertices section within an OFF file.
- Products
- slic3r-prusa
- Affected versions
- 1.37.0+dfsg-1.1, 1.37.0+dfsg-1.1build1, 1.38.0+dfsg-1, 1.39.0+dfsg-1, 1.39.1+dfsg-3, 1.39.2+dfsg-1build3, 1.39.2+dfsg-1build4, 2.1.1+dfsg-1, 2.1.1+dfsg-2, 2.1.1+dfsg-2build1, 2.1.1+dfsg-2build2, 2.1.1+dfsg-2ubuntu1, 2.3.1+dfsg-1, 2.4.0+dfsg-1, 2.4.0+dfsg-2, 2.5.2+dfsg-1, 2.7.2+dfsg-1build1, 2.7.2+dfsg-1build2, 2.9.1+dfsg-1, 2.9.2+dfsg-1, 2.9.4+dfsg-2ubuntu1, 2.9.4+dfsg-4, 2.9.6+dfsg-1, 2.9.6+dfsg-1build1
- Fixed versions
- Not specified
- CVEs
- CVE-2023-35953
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 01:42 UTC · Revision 1
Source evidence
Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffer overflow. An attacker can arbitrary code execution to trigger these vulnerabilities.This vulnerability exists within the code responsible for parsing comments within the geometric vertices section within an OFF file.
osv:UBUNTU-CVE-2023-35953
slic3r-prusa
Fixed versions: Not specified
slic3r-prusa
Fixed versions: Not specified
slic3r-prusa
Fixed versions: Not specified
slic3r-prusa
Fixed versions: Not specified
slic3r-prusa
Fixed versions: Not specified
slic3r-prusa
Fixed versions: Not specified
slic3r-prusa
Fixed versions: Not specified
Complete source record
{
"id": "eb0d982389ec5a2edc02e5bae25cc0e95badeb14151c7ed006b7adfd98722079",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2023-35953",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2023-35953",
"summary": "Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffer overflow. An attacker can arbitrary code execution to trigger these vulnerabilities.This vulnerability exists within the code responsible for parsing comments within the geometric vertices section within an OFF file.",
"evidence": "osv:UBUNTU-CVE-2023-35953",
"products": [
{
"name": {
"value": "slic3r-prusa",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.37.0+dfsg-1.1",
"evidence": "/affected/0/versions"
},
{
"value": "1.37.0+dfsg-1.1build1",
"evidence": "/affected/0/versions"
},
{
"value": "1.38.0+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.39.0+dfsg-1",
"evidence": "/affected/0/versions"
},
{
"value": "1.39.1+dfsg-3",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "slic3r-prusa",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "1.39.2+dfsg-1build3",
"evidence": "/affected/1/versions"
},
{
"value": "1.39.2+dfsg-1build4",
"evidence": "/affected/1/versions"
},
{
"value": "2.1.1+dfsg-1",
"evidence": "/affected/1/versions"
},
{
"value": "2.1.1+dfsg-2",
"evidence": "/affected/1/versions"
},
{
"value": "2.1.1+dfsg-2build1",
"evidence": "/affected/1/versions"
},
{
"value": "2.1.1+dfsg-2build2",
"evidence": "/affected/1/versions"
},
{
"value": "2.1.1+dfsg-2ubuntu1",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "slic3r-prusa",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.3.1+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2.4.0+dfsg-1",
"evidence": "/affected/2/versions"
},
{
"value": "2.4.0+dfsg-2",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "slic3r-prusa",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.5.2+dfsg-1",
"evidence": "/affected/3/versions"
},
{
"value": "2.7.2+dfsg-1build1",
"evidence": "/affected/3/versions"
},
{
"value": "2.7.2+dfsg-1build2",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "slic3r-prusa",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.9.1+dfsg-1",
"evidence": "/affected/4/versions"
},
{
"value": "2.9.2+dfsg-1",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "slic3r-prusa",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.9.4+dfsg-4",
"evidence": "/affected/5/versions"
},
{
"value": "2.9.6+dfsg-1",
"evidence": "/affected/5/versions"
},
{
"value": "2.9.6+dfsg-1build1",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "slic3r-prusa",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.9.2+dfsg-1",
"evidence": "/affected/6/versions"
},
{
"value": "2.9.4+dfsg-2ubuntu1",
"evidence": "/affected/6/versions"
},
{
"value": "2.9.4+dfsg-4",
"evidence": "/affected/6/versions"
}
]
}
],
"severity": "high",
"structured": {
"id": "UBUNTU-CVE-2023-35953",
"aliases": [
"UBUNTU-CVE-2023-35953"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "slic3r-prusa",
"purl": "pkg:deb/ubuntu/slic3r-prusa?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"1.37.0+dfsg-1.1",
"1.37.0+dfsg-1.1build1",
"1.38.0+dfsg-1",
"1.39.0+dfsg-1",
"1.39.1+dfsg-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-35953.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "slic3r-prusa",
"binary_version": "1.39.1+dfsg-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "slic3r-prusa",
"purl": "pkg:deb/ubuntu/slic3r-prusa?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"1.39.2+dfsg-1build3",
"1.39.2+dfsg-1build4",
"2.1.1+dfsg-1",
"2.1.1+dfsg-2",
"2.1.1+dfsg-2build1",
"2.1.1+dfsg-2build2",
"2.1.1+dfsg-2ubuntu1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-35953.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "prusa-slicer",
"binary_version": "2.1.1+dfsg-2ubuntu1"
},
{
"binary_name": "slic3r-prusa",
"binary_version": "2.1.1+dfsg-2ubuntu1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "slic3r-prusa",
"purl": "pkg:deb/ubuntu/slic3r-prusa?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"2.3.1+dfsg-1",
"2.4.0+dfsg-1",
"2.4.0+dfsg-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-35953.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "prusa-slicer",
"binary_version": "2.4.0+dfsg-2"
},
{
"binary_name": "slic3r-prusa",
"binary_version": "2.4.0+dfsg-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "slic3r-prusa",
"purl": "pkg:deb/ubuntu/slic3r-prusa?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"2.5.2+dfsg-1",
"2.7.2+dfsg-1build1",
"2.7.2+dfsg-1build2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-35953.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "prusa-slicer",
"binary_version": "2.7.2+dfsg-1build2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "slic3r-prusa",
"purl": "pkg:deb/ubuntu/slic3r-prusa?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"2.9.1+dfsg-1",
"2.9.2+dfsg-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-35953.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "prusa-slicer",
"binary_version": "2.9.2+dfsg-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "slic3r-prusa",
"purl": "pkg:deb/ubuntu/slic3r-prusa?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"2.9.4+dfsg-4",
"2.9.6+dfsg-1",
"2.9.6+dfsg-1build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-35953.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "prusa-slicer",
"binary_version": "2.9.6+dfsg-1build1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "slic3r-prusa",
"purl": "pkg:deb/ubuntu/slic3r-prusa?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"2.9.2+dfsg-1",
"2.9.4+dfsg-2ubuntu1",
"2.9.4+dfsg-4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-35953.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "prusa-slicer",
"binary_version": "2.9.4+dfsg-4"
}
]
}
}
],
"modified": "2026-10-17T12:57:20.177893366Z",
"provider": "osv",
"upstream": [
"CVE-2023-35953"
],
"references": [
"https://ubuntu.com/security/CVE-2023-35953",
"https://www.cve.org/CVERecord?id=CVE-2023-35953",
"https://talosintelligence.com/vulnerability_reports/TALOS-2023-1784"
]
},
"related_cves": [
{
"value": "CVE-2023-35953",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 357226,
"published_at": "2024-05-28T14:15:00+00:00"
}