Cadaver Turso3D Out-of-Bounds Write and NULL Pointer Dereference Vulnerability

Vulnerability

A vulnerability in Cadaver Turso3D has been identified, involving an out-of-bounds write, NULL pointer dereference, and several other issues such as division by zero and use of uninitialized resources. This vulnerability stems from cloned code that did not incorporate important security patches. The original vulnerabilities were related to heap and stack buffer overflows, unchecked NULL pointers, and out-of-bounds reads, among other issues.

Impact

Exploitation of this vulnerability could lead to memory corruption, allowing for potential arbitrary code execution or causing the application to crash.

Remediation

Users are advised to apply the same security patch that was implemented in the original repository from which the code was cloned.

Added: Jan 27, 2026, 10:19 AM
Updated: Jan 27, 2026, 3:10 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
7.5
exploitability
7.4
remediation
0.0
relevance
2.4
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.