CVE-2020-35634: Out-of-bounds Read
A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser<EW>::readsface() sfh->boundaryentryobjects Sloopof. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-35634?
CVE-2020-35634 is considered a critical vulnerability due to its potential for code execution through out-of-bounds read in CGAL.
How does CVE-2020-35634 impact affected systems?
CVE-2020-35634 may allow an attacker to execute arbitrary code by exploiting a specially crafted malformed file.
How do I fix CVE-2020-35634?
To mitigate CVE-2020-35634, users should upgrade to a patched version of CGAL above 5.1.1.
Which software versions are vulnerable to CVE-2020-35634?
CVE-2020-35634 affects CGAL version 5.1.1 and Debian Linux version 10.0.
What are the symptoms of CVE-2020-35634 exploitation?
Exploitation of CVE-2020-35634 may lead to unexpected application crashes or unauthorized remote code execution.