Lucene search

K
osvGoogleOSV:CVE-2020-35633
HistoryAug 30, 2021 - 6:15 p.m.

CVE-2020-35633

2021-08-3018:15:07
Google
osv.dev
6
cve-2020-35633
nef polygon-parsing
oob read vulnerability
type confusion
malicious input
software

AI Score

7.2

Confidence

Low

EPSS

0.007

Percentile

81.2%

A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() store_sm_boundary_item() Edge_of.A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger this vulnerability.

AI Score

7.2

Confidence

Low

EPSS

0.007

Percentile

81.2%