Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1
Published Apr 18, 2022
8.8
HIGHCVSS 3.1
EPSS 2.30%
Description
Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sedge() seh->prev().
Affected products
-
- Version CGAL-5.1.1StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| CGAL Project | Libcgal | n/a |
|
Configuration 1
- 5.1.1
Configuration 2
- 10.0
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AV:N/AC:M/Au:N/C:P/I:P/A:P
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
PoCAutomatable
YesTechnical Impact
TotalDecision
n/aAssessed Apr 23, 2025 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (19 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 3, 2026 | 2.30% (0.02299) | 82.70th | v5 (v2026.06.15) |
| Jun 15, 2026 | 2.07% (0.02074) | 78.94th | v5 (v2026.06.15) |
| Mar 17, 2025 | 0.45% (0.00450) | 61.58th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.51% (0.00506) | 77.28th | v3 (v2023.03.01) |
| Jul 10, 2024 | 0.51% (0.00506) | 76.68th | v3 (v2023.03.01) |
| Feb 8, 2024 | 0.30% (0.00298) | 68.59th | v3 (v2023.03.01) |
| Dec 8, 2023 | 0.30% (0.00298) | 65.99th | v3 (v2023.03.01) |
| Sep 29, 2023 | 0.20% (0.00204) | 57.92th | v3 (v2023.03.01) |
| May 30, 2023 | 0.19% (0.00193) | 55.74th | v3 (v2023.03.01) |
| May 21, 2023 | 0.25% (0.00247) | 61.11th | v3 (v2023.03.01) |
| May 8, 2023 | 0.22% (0.00219) | 58.36th | v3 (v2023.03.01) |
| Apr 25, 2023 | 0.27% (0.00268) | 62.81th | v3 (v2023.03.01) |
| Mar 19, 2023 | 0.13% (0.00133) | 46.70th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.11% (0.00115) | 43.48th | v3 (v2023.03.01) |
| Mar 6, 2023 | 1.44% (0.01440) | 73.47th | v2 (v2022.01.01) |
| Dec 7, 2022 | 1.44% (0.01440) | 72.95th | v2 (v2022.01.01) |
| Oct 22, 2022 | 1.09% (0.01086) | 52.17th | v2 (v2022.01.01) |
| Apr 23, 2022 | 1.09% (0.01086) | 50.15th | v2 (v2022.01.01) |
| Apr 19, 2022 | 2.15% (0.02155) | 78.27th | v2 (v2022.01.01) |
References (3)
- https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html mailing-listMailing ListThird Party Advisory
- https://security.gentoo.org/glsa/202305-34 vendor-advisory
- https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 ExploitThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html | mailing-listMailing ListThird Party Advisory | |
| https://security.gentoo.org/glsa/202305-34 | vendor-advisory | |
| https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 | ExploitThird Party Advisory |
Change history (0)
No recorded changes yet.