CVE catalog

CVE-2021-44961

slic3r: CVE-2021-44961

[CVE catalog]

Severity
Low
Published
Source
[NVD] · [CVE record]
EPSS
0.78% · Oct 25, 2026

A memory leakage flaw exists in the class PerimeterGenerator of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. Specially crafted stl files can exhaust available memory. An attacker can provide malicious files to trigger this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianslic3rbookworm1.3.0+dfsg1-5vulnerable
Ubuntuslic3r16.041.2.9+dfsg-2vulnerable
Ubuntuslic3r16.041.2.9+dfsg-2build1vulnerable
Ubuntuslic3r18.041.2.9+dfsg-6.1vulnerable
Ubuntuslic3r18.041.2.9+dfsg-8vulnerable
Ubuntuslic3r18.041.2.9+dfsg-9vulnerable
Ubuntuslic3r20.041.3.0+dfsg1-3vulnerable
Ubuntuslic3r20.041.3.0+dfsg1-3build1vulnerable
Ubuntuslic3r20.041.3.0+dfsg1-3ubuntu1vulnerable
Ubuntuslic3r22.041.3.0+dfsg1-5vulnerable
Ubuntuslic3r22.041.3.0+dfsg1-5build1vulnerable
Ubuntuslic3r24.041.3.0+dfsg1-5build2vulnerable
Ubuntuslic3r24.041.3.0+dfsg1-5build3vulnerable
Ubuntuslic3r24.041.3.0+dfsg1-5build4vulnerable
Ubuntuslic3r24.041.3.0+dfsg1-5build5vulnerable
Ubuntuslic3r24.041.3.0+dfsg1-5build6vulnerable
Ubuntuslic3r25.101.3.0+dfsg1-5.1vulnerable
Ubuntuslic3r25.101.3.0+dfsg1-5.1build1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianslic3rsourcebookworm(unfixed)unimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [slic3r]Affected

    Source package: [slic3r]

    Details (2)
    • 1.3.0+dfsg1-5+b2 · amd64 · bookworm

      Affected

      dsa · slic3r · debian · bookworm; dsa · slic3r · debian · 12

    • 1.3.0+dfsg1-5+b2 · arm64 · bookworm

      Affected

      dsa · slic3r · debian · bookworm; dsa · slic3r · debian · 12

Observed:

References