{"id":"CVE-2020-28601","aliases":["DEBIAN-CVE-2020-28601","DLA-2649-1","DLA-3226-1","EUVD-2020-20999","GHSA-xgmv-27h3-874r","MGASA-2021-0238","MGASA-2021-0239","UBUNTU-CVE-2020-28601","openSUSE-SU-2024:10678-1"],"status":"published","title":"A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal...","description":"A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser::read_vertex() Face_of[] OOB read. An attacker can provide malicious input to trigger this vulnerability.","severity":{"version":"3.0","score":10,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.02902,"percentile":0.87043,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125","CWE-129"],"published":"2021-03-04T00:00:00Z","modified":"2026-10-26T12:01:49Z","fixes":[{"ecosystem":"Debian:12","package":"cgal","fixed_in":["5.2-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"cgal","fixed_in":["5.2-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"cgal","fixed_in":["5.2-3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"cgal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"cgal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"cgal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2-3"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"cgal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9-1+deb9u1"}]}],"versions":["4.9-1"],"bundled":45},{"source":"osv","ecosystem":"Debian:10","package":"cgal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13-1+deb10u1"}]}],"versions":["4.13-1"],"bundled":45},{"source":"osv","ecosystem":"Mageia:7","package":"cgal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14-1.1.mga7"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:8","package":"cgal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-1.mga8"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:8","package":"openfoam","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7-17.1.mga8"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:8","package":"openscad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2021.01-1.1.mga8"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"cgal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.2-4ubuntu1","4.2-4ubuntu2","4.2-5ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"cgal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.6.1-2ubuntu6","4.7-3","4.7-4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"cgal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.9-1build2","4.11-2","4.11-2build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"cgal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.14-5","5.0.2-1ubuntu1","5.0.2-3"]}],"products":[{"vendor":"cgal","product":"computational_geometry_algorithms_library"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"}],"references":[{"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225","tags":["x_transferred","Technical Description","Third Party Advisory","advisory","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E4J344OKKDLPRN422OYRR46HDEN6MM6P/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NB5SF5OJR2DSV7CC6U7FVW5VJSJO5EKV/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/05/msg00002.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/12/msg00011.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/202305-34","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28601"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E4J344OKKDLPRN422OYRR46HDEN6MM6P/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NB5SF5OJR2DSV7CC6U7FVW5VJSJO5EKV/"},{"url":"https://github.com/advisories/GHSA-xgmv-27h3-874r"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-28601","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0238.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28881","tags":["report"]},{"url":"https://www.debian.org/lts/security/2021/dla-2649","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2021-0239.html","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/E4J344OKKDLPRN422OYRR46HDEN6MM6P/","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-28601","tags":["report"]},{"url":"https://github.com/CGAL/cgal/issues/5345","tags":["report"]},{"url":"https://github.com/CGAL/cgal/pull/5371","tags":["report"]},{"url":"https://github.com/CGAL/cgal/issues/5514","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28601","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35636","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-28601","description":"A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser::read_vertex() Face_of[] OOB read. An attacker can provide malicious input to trigger this vulnerability.","status":"published","published":"2021-03-04T00:00:00Z","modified":"2025-04-23T19:45:02.229Z","cvss":[{"version":"3.0","score":10,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-129"],"updated_at":"2026-11-02T14:35:57.352161Z"}],"euvd":[{"id":"EUVD-2020-20999","description":"A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser::read_vertex() Face_of[] OOB read. An attacker can provide malicious input to trigger this vulnerability.","status":"published","published":"2021-03-04T00:00:00Z","modified":"2025-04-23T19:45:02Z","cvss":[{"version":"3.0","score":10,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:52:05.311873Z"}],"ghsa":[{"id":"GHSA-xgmv-27h3-874r","title":"A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal...","description":"A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser::read_vertex() Face_of[] OOB read. An attacker can provide malicious input to trigger this vulnerability.","status":"published","published":"2022-05-24T17:43:37Z","modified":"2023-05-30T06:30:18Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-125","CWE-129"],"updated_at":"2026-11-02T14:54:37.218716Z"}],"nvd":[{"id":"CVE-2020-28601","description":"A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser::read_vertex() Face_of[] OOB read. An attacker can provide malicious input to trigger this vulnerability.","status":"published","published":"2021-03-04T20:15:12.91Z","modified":"2026-06-17T03:10:35.947Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.0","score":10,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-129","CWE-125"],"updated_at":"2026-11-02T14:06:37.687844Z"}],"osv":[{"id":"CVE-2020-28601","description":"A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser::read_vertex() Face_of[] OOB read. An attacker can provide malicious input to trigger this vulnerability.","status":"published","published":"2021-03-04T20:15:12.91Z","modified":"2026-10-24T10:31:04.083857956Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:16.248747Z"},{"id":"DEBIAN-CVE-2020-28601","description":"A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser::read_vertex() Face_of[] OOB read. An attacker can provide malicious input to trigger this vulnerability.","status":"published","published":"2021-03-04T20:15:12.91Z","modified":"2026-10-26T12:01:49.935946819Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:34.019707Z"},{"id":"UBUNTU-CVE-2020-28601","description":"A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_2/PM_io_parser.h PM_io_parser::read_vertex() Face_of[] OOB read. An attacker can provide malicious input to trigger this vulnerability.","status":"published","published":"2021-03-04T20:15:00Z","modified":"2026-04-22T12:39:01.650671Z","cvss":[{"version":"3.0","score":10,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:24.541803Z"},{"id":"DLA-2649-1","title":"cgal - security update","status":"published","published":"2021-05-04T00:00:00Z","modified":"2026-03-09T01:19:11.039215Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DLA-3226-1","title":"cgal - security update","status":"published","published":"2022-12-06T00:00:00Z","modified":"2026-03-09T01:23:04.843764Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"MGASA-2021-0238","title":"Updated cgal packages fix security vulnerabilities","description":"Updated cgal packages fix security vulnerabilities:\n\nAn oob read vulnerability exists in Nef_2/PM_io_parser.h\nPM_io_parser::read_vertex() Face_of[] OOB read. An attacker can provide\nmalicious input to trigger this vulnerability (CVE-2020-28601).\n\nAn oob read vulnerability exists in Nef_S2/SNC_io_parser.h\nSNC_io_parser::read_sloop() slh-\u003etwin() An attacker can provide malicious\ninput to trigger this vulnerability (CVE-2020-28636).\n\nAn oob read vulnerability exists in Nef_S2/SNC_io_parser.h\nSNC_io_parser::read_sloop() slh-\u003eincident_sface. An attacker can provide\nmalicious input to trigger this vulnerability (CVE-2020-35628).\n\nAn oob read vulnerability exists in Nef_S2/SNC_io_parser.h\nSNC_io_parser::read_sface() sfh-\u003evolume(). An attacker can provide malicious\ninput to trigger this vulnerability (CVE-2020-35636).\n","status":"published","published":"2021-06-08T16:46:03Z","modified":"2026-04-16T04:43:26.997647212Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"MGASA-2021-0239","title":"Updated cgal packages fix security vulnerabilities","description":"Updated cgal packages fix security vulnerabilities:\n\nAn oob read vulnerability exists in Nef_2/PM_io_parser.h\nPM_io_parser::read_vertex() Face_of[] OOB read. An attacker can provide\nmalicious input to trigger this vulnerability (CVE-2020-28601).\n\nAn oob read vulnerability exists in Nef_S2/SNC_io_parser.h\nSNC_io_parser::read_sloop() slh-\u003etwin() An attacker can provide malicious\ninput to trigger this vulnerability (CVE-2020-28636).\n\nAn oob read vulnerability exists in Nef_S2/SNC_io_parser.h\nSNC_io_parser::read_sloop() slh-\u003eincident_sface. An attacker can provide\nmalicious input to trigger this vulnerability (CVE-2020-35628).\n\nAn oob read vulnerability exists in Nef_S2/SNC_io_parser.h\nSNC_io_parser::read_sface() sfh-\u003evolume(). An attacker can provide malicious\ninput to trigger this vulnerability (CVE-2020-35636).\n\nThe cgal package has been updated to version 5.2.1, fixing the issues and other\nbugs.  The openfoam and openscad packages have been rebuilt against the updated\ncgal library.\n","status":"published","published":"2021-06-08T16:46:03Z","modified":"2026-04-16T04:43:47.321385742Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2024:10678-1","title":"cgal-demo-examples-devel-5.3-1.2 on GA media","description":"These are all security issues fixed in the cgal-demo-examples-devel-5.3-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:54:35.671807Z","updated_at":"2026-11-02T16:58:34.487567Z"}]}}