Out-of-Bounds Read Vulnerability in CDT Product

CVE-2025-15647

What is CVE-2025-15647?

The CDT product, specifically versions prior to 1.4.5, is susceptible to an out-of-bounds read vulnerability within the opposedVertexInd() function. This issue arises during constraint edge intersections computation, where attackers can exploit nearly-degenerate constraint edges through crafted geometry data. This exploit may lead to an out-of-bounds array access, potentially resulting in a crash of the affected application. Mitigation can be found in the updated version 1.4.5, which addresses this vulnerability.

References