p PatchFirst

PatchFirst · Latest vulnerabilities

laszip vulnerabilities

Vulnerabilities published for laszip in the last 30 days: 1. Listed in the KEV catalogue: 0.

RSS ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 1

  1. CVE-2026-110603

    Medium · CVSS 5.8EPSS 0.17%No fix published

    LASzip through 3.5.0 Invalid Free via Truncated VLR Header in laszip_read_header

    LASzip through 3.5.0 contains an invalid free vulnerability in laszip_read_header() that allows attackers to free uninitialized heap pointers via truncated variable length record data. Attackers can supply a crafted LAS/LAZ file with an inflated VLR count that, when opened and destroyed through the C API, crashes the process and corrupts the heap.

    laszipOperating systems
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →