While parsing certain malformed PLY files, PCL version 1.14.1 crashes due to an uncaught std::out_of_range exception in PCLPointCloud2::at. This issue could potentially be exploited to cause a denial-of-service (DoS) attack when processing untrusted PLY files.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade pcl | May 15, 2025 | Nov 21, 2024 |
| Ubuntu | — | Upgrade libpcl-visualization1.14Upgrade libpcl-recognition1.10 (Ubuntu Pro)Upgrade libpcl-io1.7 (Ubuntu Pro)Upgrade libpcl-io1.10 (Ubuntu Pro)Upgrade libpcl-visualization1.7 (Ubuntu Pro)Upgrade libpcl-recognition1.8 (Ubuntu Pro)Upgrade libpcl-recognition1.14 (Ubuntu Pro)Upgrade libpcl-io1.8 (Ubuntu Pro)Upgrade pcl-tools (Ubuntu Pro)Upgrade libpcl-visualization1.12 (Ubuntu Pro)Upgrade libpcl-io1.12 (Ubuntu Pro)Upgrade pcl-toolsUpgrade libpcl-io1.14Upgrade libpcl-recognition1.7 (Ubuntu Pro)Upgrade libpcl-visualization1.10 (Ubuntu Pro)Upgrade libpcl-visualization1.8 (Ubuntu Pro)Upgrade libpcl-io1.14 (Ubuntu Pro)Upgrade libpcl-visualization1.14 (Ubuntu Pro)Upgrade libpcl-recognition1.12 (Ubuntu Pro)Upgrade libpcl-recognition1.14 | Jan 27, 2025 | Nov 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub