CoreCVE
Back

HIGH

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sface() store_sm_boundary_item() Sloop_of OOB read

Published Aug 30, 2021

Description

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sface() store_sm_boundary_item() Sloop_of OOB read. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger this vulnerability.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-129

References (4)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner talos
Published Aug 30, 2021
Updated Apr 23, 2025
Reserved Dec 22, 2020
Link CVE-2020-35635
CISA Vulnrichment
Updated Apr 23, 2025
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-35635
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-35635
ENISA EUVD
Assigner talos
Published Aug 30, 2021
Updated Apr 23, 2025
Exploited since n/a
Link EUVD-2020-23301
EUVD-2020-23301