TI-2026-74097 CVE-2026-110603 · GHSA-m6xh-mjq9-hv5w
Invalid free in LASzip header parsing corrupts heap via crafted files
Priority LOW 25
LASzip through 3.5.0 contains an invalid free vulnerability in laszip_read_header() that allows attackers to free uninitialized heap pointers via truncated variable length record data.