CVE-2024-23950

Name of the Vulnerable Software and Affected Versions libigl version 2.5.0

Description The issue is related to improper array index validation vulnerabilities in the readMSH functionality. A specially crafted .msh file can lead to an out-of-bounds write. This concerns the igl::MshLoader::parse element field function when handling a binary.msh file. An attacker can trigger this issue by providing a malicious file.

Recommendations For libigl version 2.5.0, consider disabling the igl::MshLoader::parse element field function when handling binary.msh files until a patch is available. Restrict access to the readMSH functionality to minimize the risk of exploitation. Avoid using the readMSH functionality with untrusted .msh files until the issue is resolved.