CVE-2020-28636: Out-of-bounds Read

Published Mar 4, 2021

Updated

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser::readsloop() slh->twin() An attacker can provide malicious input to trigger this vulnerability.

Affected Software

5 affected components

CGAL Computational Geometry Algorithms Library=5.1.1

Fedoraproject Fedora=33

Fedoraproject Fedora=34

Debian Debian Linux=9.0

Debian Debian Linux=10.0

Event History

Mar 4, 2021

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-28636?

CVE-2020-28636 is classified as a code execution vulnerability, indicating a high severity due to potential exploitation risks.

How do I fix CVE-2020-28636?

To mitigate CVE-2020-28636, update to the latest version of CGAL or apply any available security patches provided by your operating system.

What software is affected by CVE-2020-28636?

CVE-2020-28636 affects CGAL version 5.1.1 and specific Fedora versions 33 and 34, as well as Debian versions 9.0 and 10.0.

What does CVE-2020-28636 exploit?

CVE-2020-28636 exploits an out-of-bounds read vulnerability in the polygon-parsing functionality of the CGAL library.

Who is impacted by CVE-2020-28636?

Users and developers utilizing CGAL version 5.1.1 or affected versions of Fedora and Debian are at risk from CVE-2020-28636.