Threats affecting pkg:github/libLAS

libLAS versions up to 1.8.1 have a heap out-of-bounds write vulnerability in the point record reader. This occurs because the schema byte size is truncated to 16 bits when sizing the point buffer, allowing crafted .las files with oversized LASSchema variable length records to cause memory corruption and crashes in tools like lasinfo, las2las, or las2txt.