A security flaw has been discovered in admesh up to 0.98.5. This issue affects the function stl_check_normal_vector of the file src/normals.c. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been...
Product
debian/admesh vulnerabilities
4 published CVES affecting debian/admesh, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 4
- Critical
- 0
- High
- 2
- Medium
- 1
- Low
- 0
- Unscored
- 1
- CISA KEV
- 0
Latest debian/admesh CVEs
Newest publication first
-
MediumCVSS 4.8 EPSS 0.27%
-
HighCVSS 8.8 EPSS 1.1%
An improper array index validation vulnerability exists in the stl_fix_normal_directions functionality of ADMesh Master Commit 767a105 and v0.98.4. A specially-crafted stl file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerabil...
-
DLA-3019-1 admesh - security update
PublishedUnknown -
HighCVSS 8.1 EPSS 1.1%
ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c in libadmesh.a.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.