CVE-2020-28599

Vulnerability

A stack-based buffer overflow exists in the import_stl() function of OpenSCAD version openscad-2020.12-RC2 when parsing specially crafted STL files. The vulnerability occurs during the processing of vertex coordinates in the STL file, where insufficient bounds checking leads to a stack buffer overflow [1].

Exploitation

An attacker can exploit this vulnerability by providing a malicious STL file to a user who imports it into OpenSCAD using the import("file.stl"); command. No authentication is required, and the attack vector is local (user interaction required). The attacker must craft the STL file to trigger the overflow during the parsing of vertex data [1].

Impact

Successful exploitation allows an attacker to achieve arbitrary code execution in the context of the OpenSCAD process. This can lead to full compromise of the affected system, including confidentiality, integrity, and availability impacts (CVSS 8.8) [1].

Mitigation

As of the publication date (2021-02-24), no official patch has been released for OpenSCAD. The vulnerability affects openscad-2020.12-RC2. Users are advised to avoid importing STL files from untrusted sources until a fix is provided [1].