PyPI/admesh CVE-2018-25033: unknown, EPSS 1.07%

ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c in libadmesh.a.

Action: Upgrade admesh to 0.98.5 or later.

pip install admesh==0.98.5

Affected

Fixed versions

Sources

• osv: PYSEC-2022-182
• https://github.com/admesh/admesh/issues/28
• https://github.com/advisories/GHSA-5jrq-582v-9767

CVE-2018-25033 · published 2022-05-08T06:15:00Z · modified 2023-11-08T04:00:15.219347Z · JSON