CVE-2024-24685
Published: 28 May 2024
Summary
CVE-2024-24685 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Libigl Libigl. Its CVSS base score is 7.8 (High).
Operationally, ranked in the top 8.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2024-24685 affects the readOFF function in libigl version 2.5.0 and stems from multiple stack-based buffer overflows that occur while parsing comments inside the vertex section of a specially crafted .off file. The flaws are tracked under CWE-121 and CWE-787 and carry a CVSS 3.1 score of 7.8.
An unauthenticated local attacker can exploit the issue by supplying a malicious .off file that is opened by a victim using the vulnerable library. Successful exploitation grants the attacker the ability to execute arbitrary code or crash the process, resulting in full impact to confidentiality, integrity, and availability.
The associated EPSS score has remained flat at 0.0662 with no material increase since disclosure. Public references consist of detailed technical reports from Talos Intelligence that describe the root cause and reproduction steps for TALOS-2024-1929.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-22084
Vulnerability details
Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially crafted .off file can lead to stack-based buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the parsing of…
more
comments within the vertex section of an `.off` file processed via the `readOFF` function.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Out-of-bounds writes that corrupt control flow or inject shellcode are rendered non-executable by the same memory protections.