OpenSCAD 2020.12 Release Candidate 4

CPE Details

OpenSCAD 2020.12 Release Candidate 4
openscad
openscad
2020.12
2021-02-26
18h22 +00:00
2021-03-09
13h02 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:openscad:openscad:2020.12:rc4:*:*:*:*:*:*

Informations

Vendor

openscad

Product

openscad

Version

2020.12

Update

rc4

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-0496 2022-08-29 12h03 +00:00 A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily malformed!) properties may cause an out-of-bounds memory access when imported using import().
5.5
Medium
CVE-2022-0497 2022-08-29 12h03 +00:00 A vulnerbiility was found in Openscad, where a .scad file with no trailing newline could cause an out-of-bounds read during parsing of annotations.
7.1
High
CVE-2020-28599 2021-02-24 14h58 +00:00 A stack-based buffer overflow vulnerability exists in the import_stl.cc:import_stl() functionality of Openscad openscad-2020.12-RC2. A specially crafted STL file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
7.8
High
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.