CVE-2022-38072

Name of the Vulnerable Software and Affected Versions ADMesh versions 0.98.4 and Master Commit 767a105

Description An improper array index validation issue exists in the stl fix normal directions functionality, which can lead to a heap buffer overflow when a specially-crafted stl file is provided. This allows an attacker to trigger the issue by supplying a malicious file.

Recommendations For ADMesh version 0.98.4, update to a version that fixes the stl fix normal directions functionality issue. For ADMesh Master Commit 767a105, apply a patch or update that addresses the improper array index validation vulnerability in the stl fix normal directions functionality. As a temporary workaround, consider restricting the use of the stl fix normal directions functionality until a patch is available.