Vulnerability Description
A security vulnerability has been detected in AprilRobotics apriltag up to 3.4.5. Affected by this vulnerability is the function apriltag_detector_detect of the file apriltag.c. The manipulation leads to memory corruption. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The identifier of the patch is cfac2f5ce1ffe2de25967eb1ab80bc5d99fc1a61. It is suggested to install a patch to address this issue.
CVSS Score
LOW
Related Weaknesses (CWE)
References
- https://github.com/AprilRobotics/apriltag/
- https://github.com/AprilRobotics/apriltag/commit/cfac2f5ce1ffe2de25967eb1ab80bc5
- https://github.com/AprilRobotics/apriltag/issues/422
- https://github.com/AprilRobotics/apriltag/issues/422#issuecomment-3797661933
- https://github.com/oneafter/0120/blob/main/repro
- https://vuldb.com/?ctiid.344994
- https://vuldb.com/?id.344994
- https://vuldb.com/?submit.753162
FAQ
What is CVE-2026-2246?
CVE-2026-2246 is a vulnerability with a CVSS score of 3.3 (LOW). A security vulnerability has been detected in AprilRobotics apriltag up to 3.4.5. Affected by this vulnerability is the function apriltag_detector_detect of the file apriltag.c. The manipulation leads...
How severe is CVE-2026-2246?
CVE-2026-2246 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-2246?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.