SUSE CVE-2020-28636

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser::readsloop slh-twin An attacker can provide malicious input to trigger this vulnerability...

SUSE CVE-2020-28601

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef2/PMioparser.h PMioparser::readvertex Faceof OOB read. An attacker can provide malicious input to trigger this vulnerability...

SUSE CVE-2020-35628

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in NefS2/SNCioparser.h SNCioparser::readsloop slh-incidentsface. An attacker can provide malicious input to trigger this vulnerability...

SUSE CVE-2020-35636

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in NefS2/SNCioparser.h SNCioparser::readsface sfh-volume OOB read. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution...

CGAL SNC_io Parser Heap Buffer Overflow DoS

The vulnerability of the SNCio parser function ::readsedge in the NefS2/SNCio parser component, as part of the CGAL computational geometry algorithm library, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise...

CGAL SM_io Parser Heap Buffer Overflow DoS

The vulnerability of the SMio parser function in the NefS2/SMioparser.h component, belonging to the Computational Geometry Algorithms library, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity,...

CGAL Nef_2 PM_io Parser Heap Buffer Overflow DoS

The vulnerability of the PMioparser function in the Nef2/PMioparser.h component, located in the computational geometry library, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause servi...

SNC_io parser Heap Buffer Overflow DoS

The vulnerability of SNCioparser is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created file. This vulnerability is associated with the...

Nef_S2/SNC_io parser Heap Buffer Overflow DoS

The vulnerability of the SNCioparser function involves the use of unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created file. This vulnerability is related ...

SM_io Parser Heap Buffer Overflow DoS

The vulnerability of the SMio parser function in the decorator::readvertex and setfirstoutedge components of the NefS2/SMio parser library, part of the Computational Geometry Library CGAL, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to...

SNC_io parser Heap Buffer Overflow DoS

The vulnerability of the SNCio parser function ::readfacet and fh-incidentvolume in the NefS2/SNCio parser component’s NefS2/SNCio parser.h file is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity...

[SECURITY] [DLA 3226-1] cgal security update

Debian LTS Advisory DLA-3226-1 [email protected] https://www.debian.org/lts/security/ Helmut Grohne December 06, 2022 https://wiki.debian.org/LTS Package : cgal Version : 4.13-1+deb10u1 CVE ID : CVE-2020-28601 CVE-2020-28602 CVE-2020-28603 CVE-2020-28604 CVE-2020-28605 CVE-2020-28606...

Debian dla-3226 : libcgal-demo - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3226 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3226-1 [email protected]...

libraw:libraw_nef_fuzzer: Use-of-uninitialized-value in LibRaw::canon_600_auto_wb

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5289315678945280 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawneffuzzer Job Type: libfuzzermsanlibraw Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

libraw:libraw_nef_fuzzer: Index-out-of-bounds in DHT::get_hv_rbg

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5798324217446400 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawneffuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

libraw:libraw_nef_fuzzer: Heap-buffer-overflow in LibRaw::kodak_rgb_load_raw

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4732608429031424 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawneffuzzer Job Type: libfuzzerasanlibraw Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address:...

libraw:libraw_nef_fuzzer: Index-out-of-bounds in DHT::get_hv_rbg

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=5436677686689792 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawneffuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

libraw:libraw_nef_fuzzer: Heap-buffer-overflow in LibRaw::raw2image

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=4791870991761408 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawneffuzzer Job Type: libfuzzerasanlibraw Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...

libraw:libraw_nef_fuzzer: Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6179229268312064 Project: libraw Fuzzing Engine: libFuzzer Fuzz Target: librawneffuzzer Job Type: libfuzzerubsanlibraw Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

libraw:libraw_nef_fuzzer: Heap-buffer-overflow in LibRaw::kodak_rgb_load_raw

Project: https://github.com/libraw/libraw.git Detailed Report: https://oss-fuzz.com/testcase?key=6646042577993728 Project: libraw Fuzzing Engine: afl Fuzz Target: librawneffuzzer Job Type: aflasanlibraw Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x63300001b780 Cras...