VULNERABILITY INTELLIGENCE

CVE-2020-28601

CVSS score9.8 CRITICAL
EPSS probability2.90%
CISA KEVNot currently listed
Published2021-03-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser::read_vertex() Face_of[] OOB read. An attacker can provide malicious input to trigger this vulnerability.

Weakness classification

  • CWE-125: Out-of-bounds Read
  • CWE-129: Improper Validation of Array Index

Primary references