CVE-2021-44961

MediumCVSS 5.5

Published: 01/03/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.69%

49th percentile - higher than 49% of all known CVEs

Summary

A memory leak vulnerability exists in the PerimeterGenerator class of Slic3r libslic3r version 1.3.0 and Master Commit b1a5500. Specially crafted STL files can exhaust available memory.

Risk Assessment

An attacker can provide a malicious STL file, leading to memory exhaustion and potential denial of service for the application or system.

Recommendation

It is recommended to update to a newer version of Slic3r where this vulnerability is fixed, and restrict processing of STL files from untrusted sources.

Original NVD description (English source)

A memory leakage flaw exists in the class PerimeterGenerator of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. Specially crafted stl files can exhaust available memory. An attacker can provide malicious files to trigger this vulnerability.