PT-2026-7139 · Aprilrobotics · Apriltag

Oneafter · Published 2026-02-09 · Updated 2026-02-09 · CVE-2026-2246

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions AprilRobotics apriltag versions up to 3.4.5

Description A security issue exists in AprilRobotics apriltag. The apriltag detector detect function within the apriltag.c file is susceptible to memory corruption when exploited locally. The exploit for this issue has been publicly disclosed.

Recommendations Install the patch with identifier cfac2f5ce1ffe2de25967eb1ab80bc5d99fc1a61 to address this issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2026-2246

Affected Products

Apriltag

References · 11

• 🔥 https://github.com/oneafter/0120/blob/main/repro · Exploit
• https://github.com/AprilRobotics/apriltag/commit/cfac2f5ce1ffe2de25967eb1ab80bc5d99fc1a61 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-2246 · Security Note
• https://osv.dev/vulnerability/CVE-2026-2246 · Vendor Advisory
• https://github.com/AprilRobotics/apriltag/issues/422 · Note
• https://github.com/AprilRobotics/apriltag/issues/422#issuecomment-3797661933 · Note
• https://vuldb.com/?submit.753162 · Note
• https://twitter.com/CVEnew/status/2020959694244688297 · Twitter Post
• https://vuldb.com/?ctiid.344994 · Note
• https://vuldb.com/?id.344994 · Note
• https://github.com/AprilRobotics/apriltag · Note