CVE-2018-25033

HIGH

Published May 8, 20224y ago · Modified Jun 17, 20261w ago

8.1 CVSS 3.1

High

Published May 8, 2022 4y ago

Last Modified Jun 17, 2026 1w ago

Description

ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c in libadmesh.a.

CVSS Details

Base Score

8.1

Exploitability

2.8

Impact

5.2

Vector string

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Attack Vector Network

Attack Complexity Low

Privileges Required None

User Interaction Required

Scope Unchanged

Confidentiality High

Integrity None

Availability High

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status

Public Exploit Known

Patch Available

Weaknesses 1

CWE-125 Out-of-bounds Read Memory Safety

Affected Products 2

Vendor	Product	Version	Range
admesh_project	admesh	*	≤0.98.4
debian	debian_linux	9.0	any

References 2

github.com https://github.com/admesh/admesh/issues/28

ExploitIssue TrackingPatchThird Party Advisory
lists.debian.org https://lists.debian.org/debian-lts-announce/2022/05/msg00029.html

Mailing ListThird Party Advisory

Remediation

github.com https://github.com/admesh/admesh/issues/28

ExploitIssue TrackingPatchThird Party Advisory