CVE-2023-35952

Name of the Vulnerable Software and Affected Versions libigl version 2.4.0

Description The issue is related to multiple stack-based buffer overflow vulnerabilities in the readOFF.cpp functionality. These vulnerabilities can be triggered by a specially-crafted .off file, leading to a buffer overflow and allowing an attacker to execute arbitrary code. The vulnerable code is responsible for parsing comments within the geometric faces section of an OFF file.

Recommendations For libigl version 2.4.0, consider disabling the readOFF.cpp functionality until a patch is available to prevent potential exploitation. Restrict access to .off files from untrusted sources to minimize the risk of triggering the buffer overflow vulnerabilities.