CVE-2020-35635: Out-of-bounds Read

Published Aug 30, 2021

Updated

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in NefS2/SNCioparser.h SNCioparser::readsface() storesmboundaryitem() Sloopof OOB read. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger this vulnerability.

Affected Software

2 affected components

CGAL Computational Geometry Algorithms Library=5.1.1

Debian Debian Linux=10.0

Event History

Aug 30, 2021

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-35635?

CVE-2020-35635 has been classified with a severity rating that indicates a potential for code execution vulnerabilities.

How do I fix CVE-2020-35635?

To fix CVE-2020-35635, upgrade the CGAL library to a version that patches the vulnerability.

What software is affected by CVE-2020-35635?

CVE-2020-35635 affects CGAL Computational Geometry Algorithms Library version 5.1.1 and Debian GNU/Linux 10.0.

What type of vulnerability is CVE-2020-35635?

CVE-2020-35635 is a code execution vulnerability caused by an out-of-bounds read and type confusion.

Can CVE-2020-35635 be exploited remotely?

Yes, exploiting CVE-2020-35635 can be done by using specially crafted malformed files.