Linux Distros Unpatched Vulnerability : CVE-2026-110603

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LASzip through 3.5.0 contains an invalid free vulnerability in laszipreadheader that allows attackers to free uninitialized heap pointers via truncated variable...

SUSE CVE-2026-110603

LASzip through 3.5.0 contains an invalid free vulnerability in laszipreadheader that allows attackers to free uninitialized heap pointers via truncated variable length record data. Attackers can supply a crafted LAS/LAZ file with an inflated VLR count that, when opened and destroyed through the C...

CVE-2026-110603

A flaw was found in laszip. This invalid free vulnerability allows an attacker to cause a Denial of Service DoS and memory corruption by supplying a specially crafted LAS or LAZ file. When the application processes truncated Variable Length Record VLR data with an inflated record count, it attemp...

UBUNTU-CVE-2026-110603

LASzip through 3.5.0 contains an invalid free vulnerability in laszipreadheader that allows attackers to free uninitialized heap pointers via truncated variable length record data. Attackers can supply a crafted LAS/LAZ file with an inflated VLR count that, when opened and destroyed through the C...

CVE-2026-110603

LASzip through 3.5.0 contains an invalid free vulnerability in laszipreadheader that allows attackers to free uninitialized heap pointers via truncated variable length record data. Attackers can supply a crafted LAS/LAZ file with an inflated VLR count that, when opened and destroyed through the C...

DEBIAN-CVE-2026-110603

LASzip through 3.5.0 contains an invalid free vulnerability in laszipreadheader that allows attackers to free uninitialized heap pointers via truncated variable length record data. Attackers can supply a crafted LAS/LAZ file with an inflated VLR count that, when opened and destroyed through the C...

CVE-2026-110603

LASzip through 3.5.0 contains an invalid free vulnerability in laszipreadheader that allows attackers to free uninitialized heap pointers via truncated variable length record data. Attackers can supply a crafted LAS/LAZ file with an inflated VLR count that, when opened and destroyed through the C...

CVE-2026-110603 LASzip through 3.5.0 Invalid Free via Truncated VLR Header in laszip_read_header

LASzip through 3.5.0 contains an invalid free vulnerability in laszipreadheader that allows attackers to free uninitialized heap pointers via truncated variable length record data. Attackers can supply a crafted LAS/LAZ file with an inflated VLR count that, when opened and destroyed through the C...

CVE-2026-110603

LASzip through 3.5.0 contains an invalid free vulnerability in laszipreadheader that allows attackers to free uninitialized heap pointers via truncated variable length record data. Attackers can supply a crafted LAS/LAZ file with an inflated VLR count that, when opened and destroyed through the C...

EUVD-2026-101231

LASzip through 3.5.0 contains an invalid free vulnerability in laszipreadheader that allows attackers to free uninitialized heap pointers via truncated variable length record data. Attackers can supply a crafted LAS/LAZ file with an inflated VLR count that, when opened and destroyed through the C...

CVE-2026-110603

The LASzip library (versions through 3.5.0 ) is vulnerable to an invalid free in the laszip_read_header() function. The root cause is the handling of truncated variable length record (VLR) data , where an attacker can supply a crafted LAS/LAZ file with an inflated VLR count. When the file is open...

CVE-2026-110603 LASzip through 3.5.0 Invalid Free via Truncated VLR Header in laszip_read_header

LASzip through 3.5.0 contains an invalid free vulnerability in laszipreadheader that allows attackers to free uninitialized heap pointers via truncated variable length record data. Attackers can supply a crafted LAS/LAZ file with an inflated VLR count that, when opened and destroyed through the C...

CVE-2026-110603 LASzip through 3.5.0 Invalid Free via Truncated VLR Header in laszip_read_header

LASzip through 3.5.0 contains an invalid free vulnerability in laszipreadheader that allows attackers to free uninitialized heap pointers via truncated variable length record data. Attackers can supply a crafted LAS/LAZ file with an inflated VLR count that, when opened and destroyed through the C...

CVE-2026-110603

LASzip through 3.5.0 contains an invalid free vulnerability in laszipreadheader that allows attackers to free uninitialized heap pointers via truncated variable length record data. Attackers can supply a crafted LAS/LAZ file with an inflated VLR count that, when opened and destroyed through the C...

PT-2026-114045

LASzip through 3.5.0 contains an invalid free vulnerability in laszip read header that allows attackers to free uninitialized heap pointers via truncated variable length record data. Attackers can supply a crafted LAS/LAZ file with an inflated VLR count that, when opened and destroyed through the...

CVE-2026-110603: Access of Uninitialized Pointer

LASzip through 3.5.0 contains an invalid free vulnerability in laszipreadheader that allows attackers to free uninitialized heap pointers via truncated variable length record data. Attackers can supply a crafted LAS/LAZ file with an inflated VLR count that, when opened and destroyed through the C...