Uncontrolled Memory Allocation Vulnerability in nschloe meshio Product
CVE-2026-118589

6.9MEDIUM

Key Information:

Vendor

Nschloe

Status
Meshio
Vendor
CVE Published:
28 October 2026

What is CVE-2026-118589?

A vulnerability exists in nschloe's meshio up to version 5.3.5, where a flaw in the VTK Reader component may allow attackers to manipulate the DIMENSIONS argument, resulting in uncontrolled memory allocation. This potential risk can be exploited remotely, posing a significant security concern. Despite early notification of the issue through an issue report, no response has been recorded from the project maintainers.

Affected Version(s)

meshio 5.3.0

meshio 5.3.1

meshio 5.3.2

References

https://vuldb.com/vuln/428027
vdb-entrytechnical-description
https://vuldb.com/vuln/428027/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-118589
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mohammedix88 (VulDB User)
VulDB CNA Team
.