CVE-2024-24685 affects libigl, potentially causing denial of service or arbitrary code execution. This buffer overflow vulnerability resides in the readOFF function when parsing specially crafted .off files.

CVE-2024-24685 is a stack-based buffer overflow vulnerability in the readOFF functionality of libigl v2.5.0. An attacker can exploit this critical flaw by providing a malicious .off file. Although the CVSS score is 7.8, indicating high severity, the SOCRadar Vulnerability Risk Score (SVRS) is 36, suggesting lower immediate risk despite active exploits being available. Still, the existence of exploit code makes this vulnerability significant. Successful exploitation could lead to denial of service or, more seriously, arbitrary code execution.