CVE-2020-28613

CVE-2020-28613 describes multiple code execution vulnerabilities within the Nef polygon-parsing functionality of CGAL libcgal and Debian's Computational Geometry Algorithms Library, specifically affecting version 5.1.1. An attacker can trigger an out-of-bounds read and type confusion by providing a specially crafted, malformed file, potentially leading to arbitrary code execution. This vulnerability carries a CVSS score of 8.8 (High), indicating a critical risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability, though user interaction is required. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit or ExploitDB, the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness and potential interest among researchers.