CVE-2026-122052

EUVD-2026-117199
A vulnerability has been found in laspy up to 2.7.0. Affected by this issue is some unknown functionality of the file laspy/lasreader.py of the component LAS File Handler. The manipulation leads to uncontrolled memory allocation. Remote exploitation of the attack is possible.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 26.24%
Common Weakness Enumeration
References
https://github.com/laspy/laspy/
https://github.com/laspy/laspy/issues/378
https://github.com/laspy/laspy/issues/378#issuecomment-6146934274
https://vuldb.com/cve/CVE-2026-122052
https://vuldb.com/submit/1026182
https://vuldb.com/vuln/431136
https://vuldb.com/vuln/431136/cti