ADMesh through 0.98.4 has a heap-based buffer over-read in stlupdateconnectsremove1 (called from stlremovedegenerate) in connect.c in libadmesh.a.
{ "binaries": [ { "binary_version": "0.98.2-2", "binary_name": "admesh" }, { "binary_version": "0.98.2-2", "binary_name": "libadmesh-dev" }, { "binary_version": "0.98.2-2", "binary_name": "libadmesh1" } ] }
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-25033.json"
{ "binaries": [ { "binary_version": "0.98.3-2", "binary_name": "admesh" }, { "binary_version": "0.98.3-2", "binary_name": "libadmesh-dev" }, { "binary_version": "0.98.3-2", "binary_name": "libadmesh1" } ] }
{ "binaries": [ { "binary_version": "0.98.4-1", "binary_name": "admesh" }, { "binary_version": "0.98.4-1", "binary_name": "libadmesh-dev" }, { "binary_version": "0.98.4-1", "binary_name": "libadmesh1" } ] }
{ "binaries": [ { "binary_version": "0.98.5-1build1", "binary_name": "admesh" }, { "binary_version": "0.98.5-1build1", "binary_name": "libadmesh-dev" }, { "binary_version": "0.98.5-1build1", "binary_name": "libadmesh1" } ] }