CVE-2020-28609

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

CVE-2020-28608

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

CVE-2020-28608

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

CVE-2020-28608

CVE-2020-28608 affects CGAL CGAL-5.1.1, specifically the Nef polygon-parsing code. A malformed Nef file can trigger an out-of-bounds read and type confusion in the PM_io_parser (Nef_2/PM_io_parser.h) within PMDEC::read_face() (store_fc()) leading to potential code execution. Several other related...

CVE-2020-28608

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

CVE-2020-28607

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

CVE-2020-28607

CGAL CGAL-5.1.1 contains CVE-2020-28607: an out-of-bounds read in Nef polygon parsing (PM_io_parser::read_face() / set_halfedge()) which could lead to code execution. Affected component: Nef polygon data parsing in CGAL. Connected advisories (Debian GLSA 202305-34, DLA-3226) and Gentoo/Nessus ref...

CVE-2020-28606

CGAL CGAL-5.1.1 contains CVE-2020-28606 and related CVEs affecting the Nef polygon parsing, including an out-of-bounds read in PM_io_parser.h that can lead to code execution. Debian LTS and Gentoo advisories indicate fixes in CGAL packages: Debian fixed in 4.13-1+deb10u1; Gentoo GLSA-202305-34 re...

CVE-2020-28606

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

CVE-2020-28605

CVE-2020-28605 is a code execution vulnerability in CGAL (CGAL-5.1.1) related to the Nef polygon-parsing path. A malformed input file can trigger an out-of-bounds read in Nef_2/PM_io_parser.h PM_io_parser::read_hedge() when e->set_vertex() is executed, enabling potential code execution. Public...

CVE-2020-28605

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

CVE-2020-28605

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

CVE-2020-28604

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

CVE-2020-28604

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

CVE-2020-28604

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

CVE-2020-28604

CGAL CGAL-5.1.1 contains multiple code-execution vulnerabilities in the Nef polygon-parsing: specifically, an out-of-bounds read and type confusion in PM_io_parser::read_hedge() (e->set_next()) that attackers can trigger with crafted input. Debian's security advisories list CVE-2020-28604 amon...

CVE-2020-28603

CGAL CGAL-5.1.1 Nef polygon parsing contains CVE-2020-28603: an out-of-bounds read in PM_io_parser::read_hedge() e->set_prev() can lead to code execution. Connected advisories confirm the same family of vulnerabilities and provide upgrade guidance. Mitigation: upgrade CGAL to a newer release. ...

CVE-2020-28603

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

CVE-2020-28602

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

CVE-2020-28602

CGAL-5.1.1 Nef polygon-parsing contains several memory-access vulnerabilities that can cause out-of-bounds reads and type confusion, potentially enabling code execution. The CVE of interest CVE-2020-28602 (and related CVEs 28601–28636) are described across sources (Debian GLSA/DLA advisories, Gen...