CVE-2026-2653

Katalog CVE

CVSS 7.8 · High EPSS 0,24%

Kerentanan Improper Restriction of Operations within the Bounds of a Memory Buffer pada admesh project admesh. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A security flaw has been discovered in admesh up to 0.98.5. This issue affects the function stl_check_normal_vector of the file src/normals.c. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. It looks like this product is not really maintained anymore.

Rincian

Terbit di NVD

18 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CWE-122: Heap-based Buffer Overflow

EPSS (30 hari)

0,24% peluang dieksploitasi; lebih tinggi dari 13,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.346450 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.752596 advisory pihak ketiga · vdb entry
• https://github.com/user-attachments/files/24878279/id.000035.sig.06.src.000550.time.910126.execs.241742.op.hav... exploit
• https://github.com/admesh/admesh/ product
• https://github.com/admesh/admesh/issues/65 issue tracking
• https://github.com/admesh/admesh/issues/65#issuecomment-3804571402 issue tracking
• https://vuldb.com/?ctiid.346450 permissions required · vdb entry