Description
Marlin Firmware Marlin version 1.1.x and earlier contains a Buffer Overflow vulnerability in cardreader.cpp (Depending on branch/version) that can result in Arbitrary code execution. This attack appear to be exploitable via Crafted G-Code instruction/file is sent to the printer.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | uranium-firmware-lulzbot | 1.1.9.34_5f9c029d1-1.9 | openSUSE-SU-2024:11487-1 |
Advisories 1
- openSUSE-SU-2024:11487-1 uranium-firmware-lulzbot-1.1.9.34_5f9c029d1-1.9 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026