CVE-2025-15647

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-15647

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15647.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-15647

Published

2026-09-05T11:37:59.945Z

Modified

2026-09-06T08:09:20.822074Z

Severity

6.8 (Medium) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

CDT before 1.4.5 Out-of-Bounds Read via opposedVertexInd

Details

CDT before 1.4.5 contains an out-of-bounds read vulnerability in the opposedVertexInd() function when constraint edge intersections are computed in floating point and round outside adjacent triangles. Attackers can supply nearly-degenerate constraint edges through geometry data to trigger an out-of-bounds array access that crashes the calling process.

Database specific

{
    "cwe_ids": [
        "CWE-125"
    ],
    "cna_assigner": "VulnCheck",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15647.json"
}

References

Affected packages

Git / github.com/artem-ogre/cdt

Affected ranges

Type

GIT

Repo

https://github.com/artem-ogre/cdt

Events

Introduced

Fixed

2068d015b9db3c92481e869b0c1f669b96a1d70a

Database specific

Show details

{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.4.5"
        }
    ]
}

Affected versions

0.*

0.9.0

1.*

1.0.0

1.0.1

1.1.0

1.1.1

1.1.2

1.2

1.2.0

1.3.0

1.3.1

1.3.2

1.3.3

1.3.4

1.3.5

1.3.6

1.4.0

1.4.1

1.4.2

1.4.3

1.4.4

Database specific

vanir_signatures

[
    {
        "target": {
            "file": "CDT/tests/cdt.test.cpp"
        },
        "deprecated": false,
        "id": "CVE-2025-15647-086e6c4b",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "253843401789337736866249950690114031637",
                "38007821291801855928126927508795044168",
                "325814626625485553346722033341461022505",
                "145546720321283915722955646076001189712",
                "120942135892600790935361347750135984533",
                "265285209433352185991100072161641824765"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "source": "https://github.com/artem-ogre/cdt/commit/2068d015b9db3c92481e869b0c1f669b96a1d70a"
    },
    {
        "target": {
            "file": "CDT/include/Triangulation.hpp",
            "function": "isEdgeSplitVertexValid"
        },
        "deprecated": false,
        "id": "CVE-2025-15647-09efc168",
        "signature_version": "v1",
        "digest": {
            "function_hash": "187527078421929416168465892822096221260",
            "length": 881.0
        },
        "signature_type": "Function",
        "source": "https://github.com/artem-ogre/cdt/commit/2068d015b9db3c92481e869b0c1f669b96a1d70a"
    },
    {
        "target": {
            "file": "CDT/include/CDTUtils.h"
        },
        "deprecated": false,
        "id": "CVE-2025-15647-a6ee4029",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "142420202021066570879622520004080074399",
                "231840131146558323798719270335605424818",
                "317532431642335155540026802283984337650"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "source": "https://github.com/artem-ogre/cdt/commit/2068d015b9db3c92481e869b0c1f669b96a1d70a"
    },
    {
        "target": {
            "file": "CDT/include/Triangulation.hpp"
        },
        "deprecated": false,
        "id": "CVE-2025-15647-ab2dd1cb",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "272834856032517272610121571961418578275",
                "147464765630192657708940566090517777217",
                "8542246207458306185590508860064428923",
                "199673502784664772009758524612373034",
                "118276716199956375514603008374937273007",
                "137542422739906743184364939105261055463",
                "176101671266897218597862551168017049601",
                "140663423794011426807316581249886092845",
                "3905725660658415306392210361167874126"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "source": "https://github.com/artem-ogre/cdt/commit/2068d015b9db3c92481e869b0c1f669b96a1d70a"
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15647.json"

vanir_signatures_modified

"2026-09-06T08:09:20Z"