CVE-2026-2246

Low

Description

A security vulnerability has been detected in AprilRobotics apriltag up to 3.4.5. Affected by this vulnerability is the function apriltag_detector_detect of the file apriltag.c. The manipulation leads to memory corruption. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The identifier of the patch is cfac2f5ce1ffe2de25967eb1ab80bc5d99fc1a61. It is suggested to install a patch to address this issue.

SeverityLow

CVSS3.3

Exploit probability—

ProductAprilrobotics Apriltag

PublishedFeb 9, 2026

First seenFeb 9, 2026

Weakness typeCWE-119Memory buffer bounds error

How to fix

Patches

github.com/AprilRobotics/apriltag/commit/cfac2f5ce1ffe2de25967eb1ab80bc5d99fc1a61

Affected products

Product	Affected versions	Fixed in
AprilRobotics apriltag	3.4.0, 3.4.1, 3.4.2, 3.4.3, 3.4.4, 3.4.5	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.