UBUNTU-CVE-2026-122052: Medium severity ubuntu/python-laspy vulnerability

Published Nov 5, 2026

Updated

A vulnerability has been found in laspy up to 2.7.0. Affected by this issue is some unknown functionality of the file laspy/lasreader.py of the component LAS File Handler. The manipulation leads to uncontrolled memory allocation. Remote exploitation of the attack is possible.

Affected Software

3 affected components

ubuntu/python-laspy*

Event History

Nov 5, 2026

CVE Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

Does an attacker need credentials or direct local access?

No privileges are required, and the attack vector is network-based. However, exploitation requires user interaction.

Which deployments are most relevant to triage?

Ubuntu systems using the python-laspy package with laspy versions up to 2.7.0 should be reviewed, particularly where the LAS File Handler processes data from remote or untrusted sources.

What is the expected impact if exploitation succeeds?

The reported impact is limited to availability, with a low availability impact rating. No confidentiality or integrity impact is indicated.

UBUNTU-CVE-2026-122052: Medium severity ubuntu/python-laspy vulnerability

Affected Software

Event History

Frequently Asked Questions

Does an attacker need credentials or direct local access?

Which deployments are most relevant to triage?

What is the expected impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Does an attacker need credentials or direct local access?

Which deployments are most relevant to triage?

What is the expected impact if exploitation succeeds?