CVE-2021-45847

Name: CVE-2021-45847
Creator: NVD / NIST
Published: 2022-01-25T14:15:08.86+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

MEDIUMCVSS 5.5/10EPSS 0.77%

Last modified Jun 17, 2026

CVE-2021-45847 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. Several missing input validations in the 3MF parser component of Slic3r libslic3r 1.3.0 can each allow an attacker to cause an application crash using a crafted 3MF input file.. EPSS estimates a 0.77% chance of exploitation in the next 30 days.

Description

Several missing input validations in the 3MF parser component of Slic3r libslic3r 1.3.0 can each allow an attacker to cause an application crash using a crafted 3MF input file.

Metrics

CVSS 3.1

5.5/10

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS Probability

0.77%

50.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-476

Affected Software

Vendor	Product	Versions
Slic3r	Slic3r	1.3.0

References

https://github.com/slic3r/Slic3r/issues/5118Issue Tracking, Mitigation, Patch, Third Party Advisory
https://github.com/slic3r/Slic3r/issues/5119Issue Tracking, Mitigation, Patch, Third Party Advisory
https://github.com/slic3r/Slic3r/issues/5120Issue Tracking, Mitigation, Patch, Third Party Advisory
https://github.com/slic3r/Slic3r/issues/5118Issue Tracking, Mitigation, Patch, Third Party Advisory
https://github.com/slic3r/Slic3r/issues/5119Issue Tracking, Mitigation, Patch, Third Party Advisory
https://github.com/slic3r/Slic3r/issues/5120Issue Tracking, Mitigation, Patch, Third Party Advisory

Timeline

Published: Jan 25, 2022
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2021-45847?

Several missing input validations in the 3MF parser component of Slic3r libslic3r 1.3.0 can each allow an attacker to cause an application crash using a crafted 3MF input file.

How severe is CVE-2021-45847?

CVE-2021-45847 has a CVSS score of 5.5/10 (MEDIUM severity). The EPSS model estimates a 0.77% probability of exploitation in the next 30 days.

How do I fix CVE-2021-45847?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2021-45847?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST