CVE catalog

CVE-2020-28591

slic3r: CVE-2020-28591

[CVE catalog]

Severity
Low
Published
Source
[NVD] · [CVE record]
EPSS
1.89% · Oct 25, 2026

An out-of-bounds read vulnerability exists in the AMF File AMFParserContext::endElement() functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. A specially crafted AMF file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianslic3rbookworm1.3.0+dfsg1-5fixed
Ubuntuslic3r16.041.2.9+dfsg-2vulnerable
Ubuntuslic3r16.041.2.9+dfsg-2build1vulnerable
Ubuntuslic3r18.041.2.9+dfsg-6.1vulnerable
Ubuntuslic3r18.041.2.9+dfsg-8vulnerable
Ubuntuslic3r18.041.2.9+dfsg-9vulnerable
Ubuntuslic3r20.041.3.0+dfsg1-3vulnerable
Ubuntuslic3r20.041.3.0+dfsg1-3build1vulnerable
Ubuntuslic3r20.041.3.0+dfsg1-3ubuntu1vulnerable
Ubuntuslic3r22.041.3.0+dfsg1-5vulnerable
Ubuntuslic3r22.041.3.0+dfsg1-5build1vulnerable
Ubuntuslic3r24.041.3.0+dfsg1-5build2vulnerable
Ubuntuslic3r24.041.3.0+dfsg1-5build3vulnerable
Ubuntuslic3r24.041.3.0+dfsg1-5build4vulnerable
Ubuntuslic3r24.041.3.0+dfsg1-5build5vulnerable
Ubuntuslic3r24.041.3.0+dfsg1-5build6vulnerable
Ubuntuslic3r25.101.3.0+dfsg1-5.1vulnerable
Ubuntuslic3r25.101.3.0+dfsg1-5.1build1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianslic3rsourcebookworm1.3.0+dfsg1-4unimportantNot reported[985620]

[Debian bug #985620]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [slic3r]Fixed

    Source package: [slic3r]

    Details (2)

    • 1.3.0+dfsg1-5+b2 · amd64 · bookworm

      Fixed · Fixed: 1.3.0+dfsg1-4

      dsa · slic3r · debian · bookworm; dsa · slic3r · debian · 12

    • 1.3.0+dfsg1-5+b2 · arm64 · bookworm

      Fixed · Fixed: 1.3.0+dfsg1-4

      dsa · slic3r · debian · bookworm; dsa · slic3r · debian · 12

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]