CVE-2024-27507

HIGH

libLAS 1.8.1 - Memory Corruption

Title source: llm

Description

libLAS 1.8.1 contains a memory leak vulnerability in /libLAS/apps/ts2las.cpp.

References (6)

[Exploit, Third Party Advisory] https://github.com/LuMingYinDetect/libLAS_defects/blob/main/libLAS_detect_1.md

View Exploit ZIP pw:eip

[Mailing List] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QRV2D4GYUZNZRJHVGFSYSOSZLCETI4E/

[Mailing List] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6T2B6GZQ3WUVFNAAWFQJAQY7UM4OH5TA/

[Mailing List] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WVOY7E2QWQRVXZTJGI7Z4KXGSU6BGEKH/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/[email protected]/message/6T2B6GZQ3WUVFNAAWFQJAQY7UM4OH5TA/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/[email protected]/message/WVOY7E2QWQRVXZTJGI7Z4KXGSU6BGEKH/

Scores

CVSS v3 7.5

EPSS 0.0010

EPSS Percentile 26.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-401

Status published

Affected Products (4)

liblas/liblas

fedoraproject/fedora

fedoraproject/fedora

fedoraproject/fedora

Timeline

Published Feb 27, 2024

Tracked Since Feb 18, 2026