CVE-2020-28602: Out-of-bounds Read
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef2/PMioparser.h PMioparser<PMDEC>::readvertex() Halfedgeof[].
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-28602?
CVE-2020-28602 has a high severity due to the potential for code execution through malformed input.
How do I fix CVE-2020-28602?
To fix CVE-2020-28602, update CGAL to version 5.1.2 or later.
Who is affected by CVE-2020-28602?
CVE-2020-28602 affects users of CGAL version 5.1.1, particularly on Debian Linux 10.0.
What types of vulnerabilities are present in CVE-2020-28602?
CVE-2020-28602 contains multiple vulnerabilities including out-of-bounds read and type confusion.
Can CVE-2020-28602 be exploited remotely?
Yes, CVE-2020-28602 can be exploited remotely if an attacker provides maliciously crafted input.