CVE-2025-15647
CDT before 1.4.5 contains an out-of-bounds read vulnerability in the opposedVertexInd() function when constraint edge intersections are computed in floating point and round outside adjacent triangles. Attackers can supply nearly-degenerate constraint edges through geometry data to trigger an out-of-bounds array access that crashes the calling process.
- Published Sep 5, 2026
- CVSS 6.8 medium
- 0.3% chance of exploitation in the next 30 days (EPSS)
- A fix is available