Description
A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser::read_vertex() Face_of[] OOB read. An attacker can provide malicious input to trigger this vulnerability.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a CGAL
CGAL Project libcgal CGAL-5.1.1affected
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E4J344OKKDLPRN422OYRR46HDEN6MM6P/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NB5SF5OJR2DSV7CC6U7FVW5VJSJO5EKV/ ↗
- https://lists.debian.org/debian-lts-announce/2021/05/msg00002.html ↗
- https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html ↗
- https://security.gentoo.org/glsa/202305-34 ↗