Lucene search

K
osvGoogleOSV:CVE-2020-35636
HistoryMar 04, 2021 - 8:15 p.m.

CVE-2020-35636

2021-03-0420:15:13
Google
osv.dev
6
cgal
libcgal
code execution
vulnerability
nef polygon-parsing

AI Score

7.2

Confidence

Low

EPSS

0.016

Percentile

87.3%

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sface() sfh->volume() OOB read. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger this vulnerability.

AI Score

7.2

Confidence

Low

EPSS

0.016

Percentile

87.3%