CVE-2020-28636

A vulnerability in CGAL's polygon parsing allows an attacker to cause a crash or execute code by providing specially crafted input that triggers an out-of-bounds memory read.

An out-of-bounds read vulnerability exists in the Nef polygon parser (SNC_io_parser::read_sloop) when processing malicious polygon data, allowing remote code execution or denial of service via untrusted input without authentication requirements.