Beveiligingsadvies

CVE-2020-28604

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-04-18 16:55:49

Laatst bijgewerkt 2025-04-23 18:38:37

Toegewezen door talos

CVSS-score 10.0

Status PUBLISHED

Beschrijving

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser<PMDEC>::read_hedge() e->set_next().

← Alle CVE's bekijken Bekijk op cve.org ↗