CyberSecBulletin

PointCloudLibrary vulnerabilities

We track 2 vulnerabilities in PointCloudLibrary products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 14, 2025.

2vulnerabilities
1critical
1high
0exploited
9.1average CVSS score

Latest PointCloudLibrary vulnerabilities

  • 8.3 High severity

    pcl: Out-of-bounds Write

    CVE-2025-4640PointCloudLibrary

    Out-of-bounds Write vulnerability in PointCloudLibrary pcl allows Overflow Buffers. Since version 1.14.0, PCL by default uses a zlib installation from the system, unless the user sets WITH_SYSTEM_ZLIB=FALSE. So this potential vulnerability is only relevant if

  • 9.8 Critical severity

    pcl: Improper Restriction of Operations within the Bounds of a Memory Buffer

    CVE-2025-4638PointCloudLibrary

    A vulnerability exists in the inftrees.c component of the zlib library, which is bundled within the PointCloudLibrary (PCL). This issue may allow context-dependent attackers to cause undefined behavior by exploiting improper pointer arithmetic. Since version 1