Vulnerability Spotlight: Buffer overflow vulnerability in ADMesh library

Francesco Benvenuto of Cisco Talos discovered this vulnerability.

Cisco Talos recently discovered an improper array index validation vulnerability in a functionality of the ADMesh library.

ADMesh is a C library used to process 3-D triangular meshes.

Talos found an improper array index validation vulnerability in TALOS-2022-1594 (CVE-2022-38072). A specially crafted STL file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

Cisco Talos worked with ADMesh to ensure that this issue …

array buffer buffer overflow buffer overflow vulnerability cisco cisco talos customers cve file heap buffer overflow library malicious overflow process spotlight talos trigger update validation vulnerability vulnerability spotlight