Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

bulletphysics/bullet3

              master @ 63c4d67
            

Fixes

CVEs

CRITICAL

Peak severity

Highlights

Memory Corruption: 2 prior fixes. Scrutinize any change in this area.

examples/SharedMemory/PhysicsClientC_API.cpp: most-fixed (1 issue). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Memory Corruption: A typographical or logical error using incorrect loop indexes led to out-of-bounds array access in 'm_faceRigidContacts'. Developers must carefully verify loop variable consistency in multi-nested iteration blocks.

Memory Corruption: Passing pointers referencing local stack/heap memory over shared memory or network interfaces created use-after-free and memory corruption risks when the calling context terminated.

Buffer Overflow: Processing overlong initial tokens within crafted OFF asset files triggers stack-based buffer overflows (CVE-2025-8854), allowing potential remote code execution via malicious physics assets.