CVE-2026-2653: admesh normals.c stl_check_normal_vector heap-based overflow
A security flaw has been discovered in admesh up to 0.98.5. This issue affects the function stlchecknormalvector of the file src/normals.c. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. It looks like this product is not really maintained anymore.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2653?
CVE-2026-2653 is classified as a critical severity vulnerability due to its heap-based buffer overflow affecting admesh up to version 0.98.5.
What are the potential impacts of CVE-2026-2653?
Exploitation of CVE-2026-2653 may allow an attacker to execute arbitrary code or crash the application due to memory corruption.
How do I fix CVE-2026-2653?
To fix CVE-2026-2653, upgrade admesh to a version later than 0.98.5 that addresses this heap-based buffer overflow issue.
Who is affected by CVE-2026-2653?
CVE-2026-2653 affects users and systems utilizing admesh versions up to and including 0.98.5.
What version of admesh should I use to avoid CVE-2026-2653?
To avoid CVE-2026-2653, use admesh version 0.98.6 or later, where the vulnerability has been mitigated.