QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2020-28636

Back to search

CVE-2020-28636

Published: Mar 4, 2021

Modified: Apr 23, 2025

PUBLISHED

CVSS v3.0

10.0

CRITICAL

Description

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sloop() slh->twin() An attacker can provide malicious input to trigger this vulnerability.

VendorProductVersions

n/a

CGAL

affected
CGAL Project libcgal CGAL-5.1.1

Weaknesses (CWE)

CWE-129

CVSS v3.0 Details

CVSS v3.0 Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

References

FEDORA-2021-0d42c7cb33
vendor-advisory
FEDORA-2021-9de542ab4c
vendor-advisory
GLSA-202305-34
vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now