CVE-2025-15647 — CDT before 1.4.5 Out-of-Bounds Read via opposedVertexInd
CDT before 1.4.5 contains an out-of-bounds read vulnerability in the opposedVertexInd() function when constraint edge intersections are computed in floating point and round outs…
Published: 2026-09-05 · CVSS: 6.8 · CVSS 4.0
CDT before 1.4.5 contains an out-of-bounds read vulnerability in the opposedVertexInd() function when constraint edge intersections are computed in floating point and round outside adjacent triangles. Attackers can supply nearly-degenerate constraint edges through geometry data to trigger an out-of-bounds array access that crashes the calling process.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7