CVE-2022-38072: Admesh Project Admesh

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

• Admesh Project Admesh: version 0.98.4 only; version 2022-11-18 only
• SLIC3R LIBSLIC3R: version b1a5500 only

Published 2023-04-03. Last modified 2026-06-17.