Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8fwg-c58h-9p76

Опубликовано: 19 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sface() sfh->center_vertex().

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sface() sfh->center_vertex().

EPSS

Процентиль: 65%
0.00499
Низкий

8.8 High

CVSS3

Дефекты

CWE-125
CWE-129

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 4 года назад

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() sfh->center_vertex().

CVSS3: 8.8
nvd
почти 4 года назад

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any of these vulnerabilities. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() sfh->center_vertex().

CVSS3: 8.8
debian
почти 4 года назад

Multiple code execution vulnerabilities exists in the Nef polygon-pars ...

CVSS3: 8.8
fstec
около 5 лет назад

Уязвимость функции SNC_io_parser<EW>::read_sface() sfh->center_vertex() компонента Nef_S2/SNC_io_parser.h библиотеки алгоритмов вычислительной геометрии CGAL, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

EPSS

Процентиль: 65%
0.00499
Низкий

8.8 High

CVSS3

Дефекты

CWE-125
CWE-129