CVE-2023-35949

Summary

CVE-2023-35949 is a newly discovered vulnerability affecting libigl v2.4.0. This issue involves multiple stack-based buffer overflows in the readOFF.cpp module, which is responsible for parsing geometric faces in OFF files. A carefully crafted .off file can trigger these vulnerabilities, resulting in arbitrary code execution. Attackers can exploit this weakness to gain control over the affected system. This vulnerability poses a significant risk to systems that use libigl to process OFF files and urgently requires a patch.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.