PatchTheCVElibigl vulnerabilities and fixes
Recent CVEs affecting libigl, with upgrade or downgrade steps. 17 tracked.
libigl has 17 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-05-28. Highest priority: CVE-2023-49600 (score 51/100).
- CVE-2024-24686 HIGH 7.8 DOWNGRADE Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0
- CVE-2024-24685 HIGH 7.8 DOWNGRADE Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0
- CVE-2024-24684 HIGH 7.8 DOWNGRADE Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0
- CVE-2024-24584 MEDIUM 4.3 DOWNGRADE Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0
- CVE-2024-24583 MEDIUM 4.3 DOWNGRADE Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0
- CVE-2024-23951 HIGH 8.8 DOWNGRADE Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0
- CVE-2024-23950 HIGH 8.8 DOWNGRADE Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0
- CVE-2024-23949 HIGH 8.8 DOWNGRADE Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0
- CVE-2024-23948 HIGH 8.8 DOWNGRADE Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0
- CVE-2024-23947 HIGH 8.8 DOWNGRADE Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0
- CVE-2024-22181 HIGH 7.8 DOWNGRADE An out-of-bounds write vulnerability exists in the readNODE functionality of libigl v2.5.0
- CVE-2023-49600 HIGH 8.1 DOWNGRADE An out-of-bounds write vulnerability exists in the PlyFile ply_cast_ascii functionality of libigl v2.5.0
- CVE-2023-35953 HIGH 7.8 DOWNGRADE Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0
- CVE-2023-35952 HIGH 7.8 DOWNGRADE Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0
- CVE-2023-35951 HIGH 7.8 DOWNGRADE Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0
- CVE-2023-35950 HIGH 7.8 DOWNGRADE Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0
- CVE-2023-35949 HIGH 7.8 DOWNGRADE Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0
FAQ
How do I fix libigl vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libigl being exploited right now?
None of the tracked libigl CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libigl CVE should I patch first?
CVE-2023-49600 currently ranks highest (51/100): An out-of-bounds write vulnerability exists in the PlyFile ply_cast_ascii functionality of libigl v2.5.0.