CVE catalog

CVE-2021-45847

slic3r: CVE-2021-45847

[CVE catalog]

Severity
Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.84% · Oct 25, 2026

Several missing input validations in the 3MF parser component of Slic3r libslic3r 1.3.0 can each allow an attacker to cause an application crash using a crafted 3MF input file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianslic3rbookworm1.3.0+dfsg1-5vulnerable
Ubuntuslic3r16.041.2.9+dfsg-2vulnerable
Ubuntuslic3r16.041.2.9+dfsg-2build1vulnerable
Ubuntuslic3r18.041.2.9+dfsg-6.1vulnerable
Ubuntuslic3r18.041.2.9+dfsg-8vulnerable
Ubuntuslic3r18.041.2.9+dfsg-9vulnerable
Ubuntuslic3r20.041.3.0+dfsg1-3vulnerable
Ubuntuslic3r20.041.3.0+dfsg1-3build1vulnerable
Ubuntuslic3r20.041.3.0+dfsg1-3ubuntu1vulnerable
Ubuntuslic3r22.041.3.0+dfsg1-5vulnerable
Ubuntuslic3r22.041.3.0+dfsg1-5build1vulnerable
Ubuntuslic3r24.041.3.0+dfsg1-5build2vulnerable
Ubuntuslic3r24.041.3.0+dfsg1-5build3vulnerable
Ubuntuslic3r24.041.3.0+dfsg1-5build4vulnerable
Ubuntuslic3r24.041.3.0+dfsg1-5build5vulnerable
Ubuntuslic3r24.041.3.0+dfsg1-5build6vulnerable
Ubuntuslic3r25.101.3.0+dfsg1-5.1vulnerable
Ubuntuslic3r25.101.3.0+dfsg1-5.1build1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianslic3rsourcebookworm(unfixed)unimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [slic3r]Affected

    Source package: [slic3r]

    Details (2)

    • 1.3.0+dfsg1-5+b2 · amd64 · bookworm

      Affected

      dsa · slic3r · debian · bookworm; dsa · slic3r · debian · 12

    • 1.3.0+dfsg1-5+b2 · arm64 · bookworm

      Affected

      dsa · slic3r · debian · bookworm; dsa · slic3r · debian · 12

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]