CVE-2024-23949

Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the `igl::MshLoader::parse_node_field` function while handling an `ascii`.msh` file.

• CWE-787

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-1926Technical Description, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1926Technical Description, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2024-1926Technical Description, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1926Technical Description, Third Party Advisory

Published

May 28, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-23943An unauthenticated remote attacker can gain access to the cl…9.1
• CVE-2024-23944Information disclosure in persistent watchers handling in Ap…5.3
• CVE-2024-23945Signing cookies is an application security feature that adds…5.9
• CVE-2024-23946Possible path traversal in Apache OFBiz allowing file inclus…5.3
• CVE-2024-23947Multiple improper array index validation vulnerabilities exi…8.8
• CVE-2024-23948Multiple improper array index validation vulnerabilities exi…8.8
• CVE-2024-2395The Bulgarisation for WooCommerce plugin for WordPress is vu…4.3
• CVE-2024-23950Multiple improper array index validation vulnerabilities exi…8.8
• CVE-2024-23951Multiple improper array index validation vulnerabilities exi…8.8
• CVE-2024-23952This is a duplicate for CVE-2023-46104. With correct CVE ver…6.5
• CVE-2024-23953Use of Arrays.equals() in LlapSignerImpl in Apache Hive to c…6.5
• CVE-2024-23957Autel MaxiCharger AC Elite Business C50 DLB_HostHeartBeat St…8.8