Astra Linux - уязвимость в cgal

Multiple code execution vulnerabilities exist in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of...

Vulnerability of the PM_io parser function: <PMDEC>::read_hedge() -> set_face(). This component is part of the Nef_2/PM_io parser library, a library of computational geometry algorithms (CGAL). It allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the PMioparser function is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created file. This vulnerability is present in the...

Vulnerability of the PM_io parser function: <PMDEC>::read_hedge() -> set_next(). This component is located in the Nef_2/PM_io parser.h file, which belongs to the CGAL algorithm library. It allows an attacker to access confidential data, compromise its integrity, and also cause service failures.

The vulnerability of the PMioparser function in the Nef2/PMio parser component’s readhedge method is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures through a speciall...

Vulnerability of the PM_io parser function: <PMDEC>::read_hedge() -> set_vertex(). This component is located in the Nef_2/PM_io parser.h file, which belongs to the CGAL algorithm library. It allows an attacker to access confidential data, compromise its integrity, and also cause service failures.

The vulnerability of the PMioparser function in the Nef2/PMio parser component’s Nef2/PMio parser.h library, which belongs to the Computational Geometry Algorithms library, is related to unvalidated array indexing. Exploiting this vulnerability allows an attacker to gain access to confidential...

PT-2021-7604 · Unknown +1 · Cgal Libcgal +1

Name of the Vulnerable Software and Affected Versions: CGAL libcgal version 5.1.1 Description: The issue is related to the Nef polygon-parsing functionality in CGAL libcgal. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, potentially resulting in code...