CVE-2025-15647
CDT before 1.4.5 Out-of-Bounds Read via opposedVertexInd
CDT before 1.4.5 contains an out-of-bounds read vulnerability in the opposedVertexInd() function when constraint edge intersections are computed in floating point and round outside adjacent triangles. Attackers can supply nearly-degenerate constraint edges through geometry data to trigger an out-of-bounds array access that crashes the calling process.
CVSS 4.0 · 6.8 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products