{"id":"CVE-2026-122052","published":"2026-11-05T01:17:21.670","lastModified":"2026-11-05T01:17:21.833","description":"A vulnerability has been found in laspy up to 2.7.0. Affected by this issue is some unknown functionality of the file laspy/lasreader.py of the component LAS File Handler. The manipulation leads to uncontrolled memory allocation. Remote exploitation of the attack is possible.","cvssScore":4.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cwes":["CWE-400","CWE-789"],"vendors":[],"products":[],"references":[{"url":"https://github.com/laspy/laspy/","tags":[]},{"url":"https://github.com/laspy/laspy/issues/378","tags":[]},{"url":"https://github.com/laspy/laspy/issues/378#issuecomment-6146934274","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-122052","tags":[]},{"url":"https://vuldb.com/submit/1026182","tags":[]},{"url":"https://vuldb.com/vuln/431136","tags":[]},{"url":"https://vuldb.com/vuln/431136/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/laspy/laspy/","tags":[]},{"url":"https://github.com/laspy/laspy/issues/378","tags":[]},{"url":"https://github.com/laspy/laspy/issues/378#issuecomment-6146934274","tags":[]}],"hasPoc":true,"ai":null}