PYSEC-2022-182

vendorUSosv

view advisory published 2022-05-08Licence: CC-BY-4.0

ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c in libadmesh.a.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2018-25033US	high8.1	1.07% (65th)	—	2022-05-08
ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c in libadmesh.a.

references

External citations — patches, advisories, analysis.

https://github.com/admesh/admesh/issues/28REPORT
https://github.com/advisories/GHSA-5jrq-582v-9767ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan