CVE-2020-28609: Out-of-bounds Read

Published Apr 18, 2022

Updated

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef2/PMioparser.h PMioparser<PMDEC>::readface() storeiv().

Affected Software

2 affected components

CGAL Computational Geometry Algorithms Library=5.1.1

Debian Debian Linux=10.0

Event History

Apr 18, 2022

CVE Published

via MITRE·04:55 PM

Data Sourced

via MITRE·04:55 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-28609?

CVE-2020-28609 is considered a high-severity vulnerability due to its potential for code execution.

How do I fix CVE-2020-28609?

To fix CVE-2020-28609, update to the patched version of CGAL which addresses the vulnerabilities.

What types of attacks can CVE-2020-28609 facilitate?

CVE-2020-28609 can facilitate attacks that lead to arbitrary code execution via specially crafted files.

Which versions of CGAL are affected by CVE-2020-28609?

CVE-2020-28609 affects CGAL version 5.1.1.

Is Debian GNU/Linux affected by CVE-2020-28609?

Yes, Debian GNU/Linux version 10.0 is among the affected systems for CVE-2020-28609.