What is GHSA-j3v4-fmf2-7fmp?

GHSA-j3v4-fmf2-7fmp is a security advisory published by GitHub Security Advisories with Low severity. MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are...

Which CVE IDs does GHSA-j3v4-fmf2-7fmp cover?

GHSA-j3v4-fmf2-7fmp covers the following CVE IDs: CVE-2026-105043. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-j3v4-fmf2-7fmp?

GHSA-j3v4-fmf2-7fmp has a CVSS v3 base score of 3.6, published by GitHub Security Advisories.

GHSA-j3v4-fmf2-7fmpLowCVSS 3.6

MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are...

Vendor

GitHub Security Advisories

Published

October 3, 2026

Last Modified

October 3, 2026

🔗 CVE IDs covered (1)

CVE-2026-105043 →

📋 Description

MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simulink Editor but will cause code execution.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-105043
https://alexanderboll.dev/disclosures/simulink-vulnerability-concealed-blocks
https://www.mathworks.com/help/simulink/release-notes.html#mw_81eb54b6-4dfa-42c1-8c3c-e998eff5a8cd
https://www.mathworks.com/products/simulink.html
https://github.com/advisories/GHSA-j3v4-fmf2-7fmp