CVE-2020-28616
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 10epss 2.3%
exploitation probability
2.3%top 19% of all CVEs
observed exploitation
nono source reports it
In short
A flaw in CGAL's polygon-parsing code allows an attacker to crash the program or execute malicious code by sending a specially crafted malformed file. The vulnerability occurs when the program tries to read beyond allocated memory.
Technical detail
Out-of-bounds read vulnerability in CGAL libcgal 5.1.1's Nef_S2/SNC_io_parser.h during polygon file parsing; exploitable via malformed input files without special privileges, leading to memory disclosure and potential code execution through type confusion.
Summary generated and translated by AI from the official description.
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_vertex() vh->sfaces_begin().
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
CGAL Project · libcgal