https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-15T05:11:06.007978+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-110603 fkie_cve-2026-110603 2026-10-15T05:11:06.036760+00:00

LASzip through 3.5.0 contains an invalid free vulnerability in laszip_read_header() that allows attackers to free uninitialized heap pointers via truncated variable length record data. Attackers can supply a crafted LAS/LAZ file with an inflated VLR count that, when opened and destroyed through the C API, crashes the process and corrupts the heap.

 https://db.gcve.eu/vuln/ghsa-m6xh-mjq9-hv5w GHSA-m6xh-mjq9-hv5w 2026-10-15T05:11:06.036844+00:00

LASzip through 3.5.0 contains an invalid free vulnerability in laszip_read_header() that allows attackers to free uninitialized heap pointers via truncated variable length record data. Attackers can supply a crafted LAS/LAZ file with an inflated VLR count that, when opened and destroyed through the C API, crashes the process and corrupts the heap.