Approved changes feed: RSS · Atom
cpe:2.3:a:pointcloudlibrary:pcl:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Pointcloudlibrary (bd4318ac-aea4-59ec-8e11-522186d1b1ec) |
|---|---|
| Product | Pcl (1073bffc-7a6c-514a-b478-557a97a36c5c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-52937 |
vulnerable | 2026-06-08 07:31:13.205126 |
Vulnerability in PointCloudLibrary PCL
Vulnerability in PointCloudLibrary PCL (surface/src/3rdparty/opennurbs modules). This vulnerability is associated with program files crc32.C.
This vulnerability is only relevant if the PCL version is older than 1.14.0 or the user specifically requests to not use the system zlib (WITH_SYSTEM_ZLIB=FALSE).
Published: 2025-06-23T09:26:12.727Z
Updated: 2025-06-23T13:26:46.248Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4640 |
vulnerable | 2026-06-08 07:29:16.786853 |
Out-of-bounds Write in pcl
Out-of-bounds Write vulnerability in PointCloudLibrary pcl allows Overflow Buffers. Since version 1.14.0, PCL by default uses a zlib installation from the system, unless the user sets WITH_SYSTEM_ZLIB=FALSE. So this potential vulnerability is only relevant if the PCL version is older than 1.14.0 or the user specifically requests to not use the system zlib.
Published: 2025-05-14T18:06:51.766Z
Updated: 2025-05-15T13:47:49.560Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4638 |
vulnerable | 2026-06-08 07:29:16.779923 |
Improper Pointer Arithmetic in pcl
A vulnerability exists in the inftrees.c component of the zlib library, which is bundled within the PointCloudLibrary (PCL). This issue may allow context-dependent attackers to cause undefined behavior by exploiting improper pointer arithmetic.
Since version 1.14.0, PCL by default uses a zlib installation from the system, unless the user sets WITH_SYSTEM_ZLIB=FALSE. So this potential vulnerability is only relevant if the PCL version is older than 1.14.0 or the user specifically requests to not use the system zlib.
Published: 2025-05-14T17:59:58.180Z
Updated: 2025-05-15T13:49:10.296Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.