CDT Out-of-Bounds Read in Floating-Point Geometry Processing

Executive Summary

CDT before 1.4.5 has an out-of-bounds read in the opposedVertexInd() function during floating-point edge intersection calculations. When nearly-degenerate constraint edges are processed, rounding errors can place intersection points outside adjacent triangles, causing invalid memory access that crashes the program.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check the CDT library version in use. If it is below 1.4.5, the system is vulnerable. Use commands like 'grep' or 'find' to locate CDT headers or binaries and inspect version information. For example: grep -r "CDT version" /path/to/project or ldd /path/to/binary | grep CDT.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can crash applications using CDT versions before 1.4.5 by triggering out-of-bounds memory reads. Attackers could exploit it via malformed geometry data to cause denial of service or potentially execute arbitrary code if memory corruption is controllable.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade the CDT library to version 1.4.5 or later immediately. If upgrading is not possible, avoid processing untrusted geometry data or constraint edges. Implement input validation to reject malformed data. Monitor applications using CDT for crashes or segmentation faults.

Useful 0 Not Useful 0