Medium severity5.3NVD Advisory· Published Oct 29, 2026

CVE-2026-118589

Description

A weakness has been identified in nschloe meshio up to 5.3.5. Impacted is an unknown function of the file meshio/_vtk_42.py of the component VTK Reader. Executing a manipulation of the argument DIMENSIONS can lead to uncontrolled memory allocation. The attack can be executed remotely. The project was informed of the problem early through an issue report but has not responded yet.

Patches

Vulnerability mechanics

References

github.com/nschloe/meshio/issues/1576nvd
vuldb.com/cve/CVE-2026-118589nvd
vuldb.com/submit/1026207nvd
vuldb.com/vuln/428027nvd
vuldb.com/vuln/428027/ctinvd

News mentions

No linked articles in our index yet.