171 matches found
Type confusion
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
CVE-2020-28620
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
CVE-2020-35632
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
CVE-2020-35632
CGAL 5.1.1 (Nef polygon-parsing) is affected by CVE-2020-35632. The issue is an out-of-bounds read in SNC_io_parser::read_sface (and related reads) that can lead to code execution when parsing crafted CGAL Nef data. Connected advisories confirm multiple related CVEs and report code-execution risk...
CVE-2020-35631
CVE-2020-35631 describes multiple code-execution vulnerabilities in CGAL 5.1.1’s Nef polygon-parsing. The issues are caused by out-of-bounds reads and type confusion in the SNC_io_parser and related Nef/PM/SM parser code paths (e.g., read_sface, read_vertex, read_hedge, read_face, read_sloop, etc...
CVE-2020-35631
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
CVE-2020-35630
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
CVE-2020-35630
CGAL 5.1.1 Nef polygon-parsing (CGAL-5.1.1) contains multiple code-execution vulnerabilities. Affected component/file set includes out-of-bounds reads and type confusion within the Nef_S2/NSC_io_parser and related PM_io_parser/SNC_io_parser paths, e.g. CVE-2020-35630 (read_sface() center_vertex()...
CVE-2020-35629
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
CVE-2020-35629
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
CVE-2020-35629
CVE-2020-35629 affects CGAL CGAL-5.1.1 Nef polygon-parsing: an out-of-bounds read and type confusion in SNC_io_parser/read_sloop() (slh->facet()) can lead to code execution. Debia n/ Gentoo advisories and multiple NASL entries indicate fixes in CGAL packages (Debian: 4.13-1+deb10u1; Gentoo GLS...
CVE-2020-28635
CVE-2020-28635 affects CGAL’s Nef polygon-parsing in the CGAL-5.1.1 package. The entry describes multiple out-of-bounds read vulnerabilities in the Nef parser that can lead to code execution when processing crafted input, specifically mentioning the SNC_io_parser and read_sedge()/facet() paths, a...
CVE-2020-28634
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
CVE-2020-28633
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
CVE-2020-28633
CGAL-5.1.1 Nef polygon parsing contains an out-of-bounds read vulnerability in SNC_io_parser.read_sedge() (prev) that can lead to code execution. CVE-2020-28633 is reported publicly; Debian Gentoo advisories/date ranges indicate fixes in later CGAL releases (e.g., CGAL ≥5.4.1). Remediation per co...
CVE-2020-28633
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
CVE-2020-28632
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...
CVE-2020-28632
CVE-2020-28632 affects CGAL libcgal CGAL-5.1.1, specifically in the Nef polygon-parsing path where an out-of-bounds read can cause a type-confusion condition, enabling potential code execution. The vulnerability is tied to oob reads in SNC_io_parser.h/Nef_S2/SNC_io_parser.h (read_sedge and relate...
CVE-2020-28631
Summary : CVE-2020-28631 is a code-execution vulnerability in CGAL libcgal CGAL-5.1.1, arising from the Nef polygon-parsing path. An attacker-supplied file can trigger an out-of-bounds read and type confusion, enabling potentially arbitrary code execution. The advisory text references specific oo...
CVE-2020-28631
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...