Critical severity9.8NVD Advisory· Published Mar 4, 2021· Updated Jun 17, 2026
CVE-2020-28636
CVE-2020-28636
Description
A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sloop() slh->twin() An attacker can provide malicious input to trigger this vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8- CGAL/libcgaldescription
- Range: =5.1.1
- cpe:2.3:a:cgal:computational_geometry_algorithms_library:5.1.1:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
6- lists.debian.org/debian-lts-announce/2021/05/msg00002.htmlnvdMailing ListThird Party Advisory
- lists.debian.org/debian-lts-announce/2022/12/msg00011.htmlnvdMailing ListThird Party Advisory
- talosintelligence.com/vulnerability_reports/TALOS-2020-1225nvdTechnical DescriptionThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E4J344OKKDLPRN422OYRR46HDEN6MM6P/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NB5SF5OJR2DSV7CC6U7FVW5VJSJO5EKV/nvd
- security.gentoo.org/glsa/202305-34nvd
News mentions
0No linked articles in our index yet.