CVE-2023-35952
CVE-2023-35952 is a high vulnerability (CVSS 7.8) in Libigl, published May 28, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.50%, the 42nd percentile. No source names a fixed version.
Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffer overflow. An attacker can arbitrary code execution to trigger these vulnerabilities.This vulnerability exists within the code responsible for parsing comments within the geometric faces section within an OFF file.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffer overflow. An attacker can arbitrary code execution to trigger these vulnerabilities.This vulnerability exists within the code responsible for parsing comments within the geometric faces section within an OFF file.
- Record
CVE-2023-35952- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-121
- Updated
- 2026-11-02
EUVDEUVD-2023-39936
Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffer overflow. An attacker can arbitrary code execution to trigger these vulnerabilities.This vulnerability exists within the code responsible for parsing comments within the geometric faces section within an OFF file.
- Record
EUVD-2023-39936- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
NVD
Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffer overflow. An attacker can arbitrary code execution to trigger these vulnerabilities.This vulnerability exists within the code responsible for parsing comments within the geometric faces section within an OFF file.
- Record
CVE-2023-35952- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-121, CWE-787
- Updated
- 2026-11-02
OSV
Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffer overflow. An attacker can arbitrary code execution to trigger these vulnerabilities.This vulnerability exists within the code responsible for parsing comments within the geometric faces section within an OFF file.
- Record
CVE-2023-35952- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-121
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-35952
Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffer overflow. An attacker can arbitrary code execution to trigger these vulnerabilities.This vulnerability exists within the code responsible for parsing comments within the geometric faces section within an OFF file.
- Record
UBUNTU-CVE-2023-35952- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
slic3r-prusaUbuntu:18.04:LTS |
All versions, plus listed versions 1.37.0+dfsg-1.11.37.0+dfsg-1.1build11.38.0+dfsg-11.39.0+dfsg-11.39.1+dfsg-3 |
None known |
slic3r-prusaUbuntu:20.04:LTS |
All versions, plus listed versions 1.39.2+dfsg-1build31.39.2+dfsg-1build42.1.1+dfsg-12.1.1+dfsg-22.1.1+dfsg-2build12.1.1+dfsg-2build22.1.1+dfsg-2ubuntu1 |
None known |
slic3r-prusaUbuntu:22.04:LTS |
All versions, plus listed versions 2.3.1+dfsg-12.4.0+dfsg-12.4.0+dfsg-2 |
None known |
slic3r-prusaUbuntu:24.04:LTS |
All versions, plus listed versions 2.5.2+dfsg-12.7.2+dfsg-1build12.7.2+dfsg-1build2 |
None known |
slic3r-prusaUbuntu:25.10 |
All versions, plus listed versions 2.9.1+dfsg-12.9.2+dfsg-1 |
None known |
slic3r-prusaUbuntu:26.10 |
All versions, plus listed versions 2.9.4+dfsg-42.9.6+dfsg-12.9.6+dfsg-1build1 |
None known |
slic3r-prusaUbuntu:26.04:LTS |
All versions, plus listed versions 2.9.2+dfsg-12.9.4+dfsg-2ubuntu12.9.4+dfsg-4 |
None known |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases, published | EUVD |
| 2026-11-02 | created | CVE List, NVD, OSV |