Heap-Based Buffer Over-Read in libLAS 1.8.1 Affects Red Hat Products
CVE-2018-20536

6.5MEDIUM

Key Information:

Vendor: Liblas
Status: Liblas
Vendor: CVE Published:; 28 December 2018

What is CVE-2018-20536?

A heap-based buffer over-read vulnerability has been identified in libLAS version 1.8.1, specifically within the SpatialReference::GetGTIF() function in spatialreference.cpp. This flaw can lead to a denial of service, potentially causing system instability or crashes when certain input is processed. Organizations using affected versions should prioritize applying available patches to mitigate risks associated with this vulnerability.