admesh normals.c stl_check_normal_vector heap-based overflow
Priority MEDIUM 55CWE-119Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- Low · Low · Low
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
A security flaw has been discovered in admesh up to 0.98.5. This issue affects the function stl_check_normal_vector of the file src/normals.c. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. It looks like this product is not really maintained anymore.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00271 19th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | admesh | 0.98.0; 0.98.1; 0.98.2; 0.98.3; 0.98.4; 0.98.5 | — | No fix listed | CNA |
- admesh Vendor— Affected 0.98.0; 0.98.1; 0.98.2; 0.98.3; 0.98.4; 0.98.5 Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:admesh_project:admesh:*:*:*:*:*:*:*:* | up to 0.98.5 | Vulnerable | Admesh Project |
- cpe:2.3:a:admesh_project:admesh:*:*:*:*:*:*:*:* Versions up to 0.98.5 Vulnerable ·Admesh Project
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Timeline
- 2026-10-02 Threatist record created from CVE-2026-2653
- 2026-10-03 Alias added: GHSA-vcj6-96x2-26j3
References
More Admesh Project Admesh vulnerabilities
- TI-2022-17785 Improper array index validation in ADMesh CVSS 3.1HIGH 8.8
- TI-2018-15260 ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1… CVSS 3.1HIGH 8.1
Sources
- CVE-2026-2653 · CVE Program
- CVE-2026-2653 · NVD
- FIRST EPSS
- GHSA-vcj6-96x2-26j3 · GitHub Advisory Database · CC BY 4.0
- CVE-2026-2653 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences