CVE-2020-35628: Out-of-bounds Read

Published Mar 4, 2021

Updated

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser::readsloop() slh->incidentsface. An attacker can provide malicious input to trigger this vulnerability.

Affected Software

5 affected components

CGAL Computational Geometry Algorithms Library=5.1.1

Fedoraproject Fedora=33

Fedoraproject Fedora=34

Debian Debian Linux=9.0

Debian Debian Linux=10.0

Event History

Mar 4, 2021

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-35628?

CVE-2020-35628 has been classified as a code execution vulnerability which can lead to significant security risks.

How do I fix CVE-2020-35628?

To fix CVE-2020-35628, you should upgrade to the latest versions of CGAL and associated affected software packages in your environment.

Which versions of CGAL are affected by CVE-2020-35628?

CVE-2020-35628 specifically affects CGAL version 5.1.1.

Are there any specific operating systems affected by CVE-2020-35628?

Yes, CVE-2020-35628 impacts Fedora 33, Fedora 34, and Debian 9.0 and 10.0.

What type of vulnerability is CVE-2020-35628?

CVE-2020-35628 is classified as an out-of-bounds read vulnerability that can lead to code execution.