Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.8	EPSS 0.2%	CVE-2026-110603LASzip · Access of Uninitialized Pointer Medium5.8EPSS 0.2%2026-10-14CVE Database V5CVE-2026-110603 CVE-2026-110603 is a medium severity vulnerability in LASzip up to version 3.5.0. It involves an invalid free of uninitialized heap pointers in the laszip_read_header() function triggered by crafted LAS/LAZ files with inflated variable length record (VLR) counts. This can cause process crashes and heap corruption when the file is opened and closed via the C API. EPSS 0.2%Vulnerability rapidlasso	CVE Database V5	2026-10-14

Showing 1–1 of 1 result