Vulnerability · Published Mar 10, 2021 · Assigned by talos
CVE-2021-21772
High 8.1
In plain English
A high-severity security flaw in 3MF. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 4.2% (higher than 91% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.0)8.1High
Exploit odds (30 days)4.2%top 9.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Public PoC
Official description
A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF Consortium lib3mf 2.0.0. A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | lib3mf | 1.8.1+ds-4 | DEBIAN-CVE-2021-21772 |
| Debian:13 | lib3mf | 1.8.1+ds-4 | DEBIAN-CVE-2021-21772 |
| Debian:14 | lib3mf | 1.8.1+ds-4 | DEBIAN-CVE-2021-21772 |
Affected products (as reported)
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2020-1226
- FEDORA-2021-bb1b7591c4 vendor-advisory
- FEDORA-2021-6945629745 vendor-advisory
- FEDORA-2021-b73f9c96ee vendor-advisory
- DSA-4887 vendor-advisory
- GLSA-202208-01 vendor-advisory
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2021-1226