Approved changes feed: RSS · Atom

cpe:2.3:a:admesh_project:admesh:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAdmesh Project (b656dbe3-c925-5361-95dc-8f9269c6a821)
ProductAdmesh (1b1f87a8-1bbb-5dc5-b297-dbf6ef4b9ba4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/admesh purl2cpe 2026-06-01 10:12:36.117697
pkg:deb/ubuntu/admesh purl2cpe 2026-06-01 10:12:36.117701
pkg:github/admesh/admesh purl2cpe 2026-06-01 10:12:36.117704
pkg:rpm/fedora/admesh purl2cpe 2026-06-01 10:12:36.117708
pkg:rpm/opensuse/admesh purl2cpe 2026-06-01 10:12:36.117711

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-2653 vulnerable 2026-06-08 07:55:17.335687 admesh normals.c stl_check_normal_vector heap-based overflow
MEDIUM (5.3)
A security flaw has been discovered in admesh up to 0.98.5. This issue affects the function stl_check_normal_vector of the file src/normals.c. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. It looks like this product is not really maintained anymore.
Published: 2026-02-18T11:02:07.838Z
Updated: 2026-02-23T10:17:19.908Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-25033 vulnerable 2026-06-08 05:11:29.213629 Details available
ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c in libadmesh.a.
Published: 2022-05-08T05:03:10.000Z
Updated: 2024-08-05T12:26:39.623Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.