DEBIAN-CVE-2026-122052: Debian/python-laspy vulnerability

Published Nov 5, 2026

Updated

A vulnerability has been found in laspy up to 2.7.0. Affected by this issue is some unknown functionality of the file laspy/lasreader.py of the component LAS File Handler. The manipulation leads to uncontrolled memory allocation. Remote exploitation of the attack is possible.

Affected Software

2 affected components

debian/python-laspy*

Event History

Nov 5, 2026

CVE Published

via OSV·01:17 AM

Data Sourced

via OSV·01:17 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which deployments should be prioritized for review?

Review Debian systems using the python-laspy package where applications handle LAS files through the LAS File Handler. The affected functionality is in laspy/lasreader.py, and versions up to 2.7.0 are identified as affected.

Can this be exploited remotely?

Yes. The available information states that remote exploitation is possible, although it does not specify the required request path, input format, or authentication conditions.

Is a fixed version identified?

No fixed version is provided in the available data. It identifies laspy versions up to 2.7.0 as affected.

DEBIAN-CVE-2026-122052: Debian/python-laspy vulnerability

Affected Software

Event History

Frequently Asked Questions

Which deployments should be prioritized for review?

Can this be exploited remotely?

Is a fixed version identified?

Company

Resources

Contact

Frequently Asked Questions

Which deployments should be prioritized for review?

Can this be exploited remotely?

Is a fixed version identified?