CVE-2020-35631

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

CVE-2020-35631

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

CVE-2020-35631

CVE-2020-35631 describes multiple code-execution vulnerabilities in CGAL 5.1.1’s Nef polygon-parsing. The issues are caused by out-of-bounds reads and type confusion in the SNC_io_parser and related Nef/PM/SM parser code paths (e.g., read_sface, read_vertex, read_hedge, read_face, read_sloop, etc...