CVE-2020-28630: Out-of-bounds Read
Published Apr 18, 2022
·Updated
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser<EW>::readsedge() seh->snext().
Affected Software
2 affected components
CGAL Computational Geometry Algorithms Library=5.1.1
Debian Debian Linux=10.0
Event History
Apr 18, 2022
CVE Published
via MITRE·04:56 PM
Data Sourced
via MITRE·04:56 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-28630?
The severity of CVE-2020-28630 is critical with a CVSS score of 8.8.
2
How can I mitigate the vulnerabilities in CGAL libcgal 5.1.1?
Update to a patched version of CGAL libcgal that addresses the code execution vulnerabilities.
3
What type of vulnerabilities exist in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1?
Multiple code execution vulnerabilities, including out-of-bounds read and type confusion, exist in this functionality.