CVE-2018-1000537

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-06-26 · updated 2026-06-17
Weakness: CWE-119

Description

Marlin Firmware Marlin version 1.1.x and earlier contains a Buffer Overflow vulnerability in cardreader.cpp (Depending on branch/version) that can result in Arbitrary code execution. This attack appear to be exploitable via Crafted G-Code instruction/file is sent to the printer.

Affected products

Marlinfw Marlin Firmware: through 1.1.0

References

http://forums.reprap.org/read.php?415%2C823246
https://github.com/MarlinFirmware/Marlin/pull/10925
http://forums.reprap.org/read.php?415%2C823246
https://github.com/MarlinFirmware/Marlin/pull/10925

Get alerted when CVE-2018-1000537 or the next vulnerability affects your stack