libLAS CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM libLAS CVE published 2026-10-18

CVE-2026-112059

CVE-2026-112059 is a heap out-of-bounds write vulnerability in libLAS through version 1.8.1. The vulnerability is caused by truncating the schema byte size to 16 bits when sizing the point buffer, allowing attackers to craft malicious .las files that can cause memory corruption and crashes in tools like lasinfo, las2las, or las2txt. This vulnerability can be triggered by a specially crafted .las file with [truncated]