GHSA-5jrq-582v-9767

Out-of-bounds read in admesh

Source: GitHub Advisory Database (reviewed) High CVE-2018-25033

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	admesh	< 0.98.5	0.98.5

Details

As written in the advisory (Markdown source, shown as plain text).

ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c in libadmesh.a.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2018-25033 advisory
https://github.com/admesh/admesh/issues/28 web
https://github.com/admesh/admesh package
https://github.com/advisories/GHSA-5jrq-582v-9767 advisory
https://github.com/pypa/advisory-database/tree/main/vulns/admesh/PYSEC-2022-182.yaml web
https://lists.debian.org/debian-lts-announce/2022/05/msg00029.html web