What is GHSA-5jrq-582v-9767?

GHSA-5jrq-582v-9767 is a security advisory published by GitHub Security Advisories with High severity. Out-of-bounds read in admesh

Which CVE IDs does GHSA-5jrq-582v-9767 cover?

GHSA-5jrq-582v-9767 covers the following CVE IDs: CVE-2018-25033. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5jrq-582v-9767?

GHSA-5jrq-582v-9767 has a CVSS v3 base score of 8.1, published by GitHub Security Advisories.

Which products are affected by GHSA-5jrq-582v-9767?

GHSA-5jrq-582v-9767 affects 1 product, including: pip/admesh:\u003c 0.98.5.

GHSA-5jrq-582v-9767HighCVSS 8.1

Out-of-bounds read in admesh

Vendor

GitHub Security Advisories

Published

May 9, 2022

Last Modified

January 29, 2023

🔗 CVE IDs covered (1)

CVE-2018-25033 →

📋 Description

ADMesh through 0.98.4 has a heap-based buffer over-read in stl_update_connects_remove_1 (called from stl_remove_degenerate) in connect.c in libadmesh.a.

🎯 Affected products1

pip/admesh:< 0.98.5

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2018-25033
https://github.com/admesh/admesh/issues/28
https://lists.debian.org/debian-lts-announce/2022/05/msg00029.html
https://github.com/advisories/GHSA-5jrq-582v-9767
https://github.com/pypa/advisory-database/tree/main/vulns/admesh/PYSEC-2022-182.yaml