CVE-2025-15647: CDT before 1.4.5 Out-of-Bounds Read via opposedVertexInd
CDT before 1.4.5 contains an out-of-bounds read vulnerability in the opposedVertexInd() function when constraint edge intersections are computed in floating point and round outside adjacent triangles. Attackers can supply nearly-degenerate constraint edges through geometry data to trigger an out-of-bounds array access that crashes the calling process.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed?
CDT installations earlier than 1.4.5 are affected when they process geometry data containing nearly-degenerate constraint edges. The issue is locally exploitable and can crash the calling process.
What does an attacker need to trigger the issue?
An attacker needs to supply crafted geometry data with nearly-degenerate constraint edges. The CVSS vector indicates no privileges are required, but user interaction is required.
How can I determine whether remediation is needed?
Check the CDT version used by the affected application. Versions before 1.4.5 should be updated to 1.4.5 or later.