CVE-2018-25033: Out-of-bounds Read

May 9, 2022 (updated May 25, 2022)

ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c in libadmesh.a.

References

github.com/admesh/admesh/issues/28
github.com/advisories/GHSA-5jrq-582v-9767
lists.debian.org/debian-lts-announce/2022/05/msg00029.html
nvd.nist.gov/vuln/detail/CVE-2018-25033

Code Behaviors & Features

Detect and mitigate CVE-2018-25033 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →