CVE-2025-4640: Out-of-bounds Write in pcl
Out-of-bounds Write vulnerability in PointCloudLibrary pcl allows Overflow Buffers. Since version 1.14.0, PCL by default uses a zlib installation from the system, unless the user sets WITHSYSTEMZLIB=FALSE. So this potential vulnerability is only relevant if the PCL version is older than 1.14.0 or the user specifically requests to not use the system zlib.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4640?
CVE-2025-4640 is classified as a high-severity vulnerability due to the potential for an out-of-bounds write, which can lead to buffer overflow issues.
How do I fix CVE-2025-4640?
To fix CVE-2025-4640, upgrade PointCloudLibrary to version 1.14.0 or later, which mitigates the vulnerability.
What versions of PointCloudLibrary are affected by CVE-2025-4640?
CVE-2025-4640 affects versions of PointCloudLibrary prior to 1.14.0.
What causes the vulnerability in CVE-2025-4640?
The vulnerability in CVE-2025-4640 is caused by an out-of-bounds write related to buffer handling in older versions of PointCloudLibrary.
Is CVE-2025-4640 relevant for users with the latest PointCloudLibrary?
CVE-2025-4640 is not relevant for users who have updated to PointCloudLibrary version 1.14.0 or newer, as the issue has been resolved.