CVE-2020-28603: 
Linux Debian vulnerability analysis and mitigation

Multiple code execution vulnerabilities exist in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger these vulnerabilities (TALOS, NVD).

The vulnerability exists in the Nef2/PMioparser.h PMioparser::readhedge() e->setprev() function. The issue occurs when parsing files containing Nef polygon data, where there's no proper validation of user-supplied data before using it as a vector index. This leads to out-of-bounds read and type confusion conditions when accessing memory ([TALOS](https://talosintelligence.com/vulnerabilityreports/TALOS-2020-1225)).

The vulnerability allows attackers to execute arbitrary code through memory corruption by providing malicious input. The severity of this issue is high as it can lead to code execution in the context of the current process (TALOS).

The vulnerability has been fixed in later versions of CGAL. Users are recommended to upgrade to version 5.4.1 or later to address these security issues (Gentoo).