CDT, a computational geometry library, contains an out‑of‑bounds read that occurs in the opposedVertexInd() routine when constraint edge intersections are evaluated using floating‑point arithmetic. The flaw allows an attacker to provide a nearly‑degenerate constraint edge that causes an array index to fall outside the valid range. The read triggers a hard crash of the calling process and can be used to disrupt availability, but has no known impact on data confidentiality or integrity.

The vulnerability affects any software that incorporates the CDT library prior to version 1.4.5. The affected vendor is artem‑ogre for the CDT library. Applications that load or process geometric data using the library without upgrading to 1.4.5 or later are at risk.

The CVSS score of 6.8 classifies the flaw as medium severity and indicates that denial of service is the primary risk. The EPSS score is not available, and the vulnerability is not listed in CISA KEV, suggesting that a coordinated exploitation campaign has not been documented. The attack requires the attacker to influence the geometry data that the library processes; thus, the attack vector is likely a local or remote file or data injection into a trusted application. Since the flaw is an out‑of‑bounds read, it is unlikely to enable arbitrary code execution unless it is combined with other memory corruption weaknesses. Nonetheless, the crash can be leveraged to execute denial of service attacks against any application that uses the vulnerable library.