CVE-2024-8374

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

UltiMaker Cura slicer versions 5.7.0-beta.1 through 5.7.2 are vulnerable to code injection via the 3MF format reader (/plugins/ThreeMFReader.py). The vulnerability arises from improper handling of the drop_to_buildplate property within 3MF files, which are ZIP archives containing the model data. When a 3MF file is loaded in Cura, the value of the drop_to_buildplate property is passed to the Python eval() function without proper sanitization, allowing an attacker to execute arbitrary code by crafting a malicious 3MF file. This vulnerability poses a significant risk as 3MF files are commonly shared via 3D model databases.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

No affected versions have been published.

Timeline

Published: Sep 3, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-83757.8There exists a use after free vulnerability in Reverb. Reverb supports the VARIANT datatype, which is supposed to represent an arbitrary obj CVE-2024-83767.5In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending spe CVE-2024-83784.8The Safe SVG WordPress plugin before 2.2.6 has its sanitisation code is only running for paths that call wp_handle_upload, but not for examp CVE-2024-83797.2The Cost Calculator Builder WordPress plugin before 3.2.29 does not properly sanitise and escape a parameter before using it in a SQL statem CVE-2024-83809.8A vulnerability was found in SourceCodester Contact Manager with Export to VCF 1.0. It has been rated as critical. This issue affects some u CVE-2024-83819.8A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environmen CVE-2024-83828.8Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web cont CVE-2024-83837.5Firefox normally asks for confirmation before asking the operating system to find an application to handle a scheme that the browser does no CVE-2024-83849.8The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two pa CVE-2024-83859.8A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. Th CVE-2024-83866.1If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of another site to perform CVE-2024-83879.8Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption