CVE-2026-2653CWE-119CWE-122

admesh normals.c stl_check_normal_vector heap-based overflow

Medium · published February 18, 2026

CVSS v4.0
4.8
EPSS
0%
Percentile
16.6
In the wild
Unconfirmed
What it is

A security flaw has been discovered in admesh up to 0.98.5. This issue affects the function stl_check_normal_vector of the file src/normals.c. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. It looks like this product is not really maintained anymore.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00259 · 16.6th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-122 · Heap-based Buffer Overflow
Published
2026-02-18T11:02Z
EPSS history
Timeline
  • 18 FEB 11:02Z
    admesh normals.c stl_check_normal_vector heap-based overflow
    cvelistv5