CVE-2020-35630: Out-of-bounds Read

Published Apr 18, 2022

Updated

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser<EW>::readsface() sfh->centervertex().

Affected Software

2 affected components

CGAL Computational Geometry Algorithms Library=5.1.1

Debian Debian Linux=10.0

Event History

Apr 18, 2022

CVE Published

via MITRE·04:56 PM

Data Sourced

via MITRE·04:56 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-35630?

CVE-2020-35630 is classified as a high-severity vulnerability due to potential code execution risks.

How do I fix CVE-2020-35630?

To mitigate CVE-2020-35630, update the affected software CGAL to version 5.1.2 or later.

What systems are affected by CVE-2020-35630?

CVE-2020-35630 affects CGAL version 5.1.1 and Debian GNU/Linux version 10.0.

What can attackers do with CVE-2020-35630?

Attackers can exploit CVE-2020-35630 to execute arbitrary code through specially crafted malformed files.

Is CVE-2020-35630 a local or remote vulnerability?

CVE-2020-35630 can be exploited remotely by delivering malicious files to the target system.