CVE-2020-28605: Out-of-bounds Read
Published Apr 18, 2022
·Updated
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read exists in Nef2/PMioparser.h PMioparser<PMDEC>::readhedge() e->setvertex().
Affected Software
2 affected components
CGAL Computational Geometry Algorithms Library=5.1.1
Debian Debian Linux=10.0
Event History
Apr 18, 2022
CVE Published
via MITRE·04:55 PM
Data Sourced
via MITRE·04:55 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-28605?
The severity of CVE-2020-28605 is critical with a CVSS score of 8.8.
2
How can I mitigate the code execution vulnerabilities in CGAL libcgal CGAL-5.1.1 (CVE-2020-28605)?
To mitigate the vulnerabilities, it is recommended to update to a patched version of the software provided by the vendor.
3
What can a specially crafted malformed file lead to in CVE-2020-28605?
A specially crafted malformed file can lead to an out-of-bounds read, type confusion, and potential code execution in CVE-2020-28605.