CVE-2018-20536: Liblas

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

There is a heap-based buffer over-read at liblas::SpatialReference::GetGTIF() (spatialreference.cpp) in libLAS 1.8.1 that will cause a denial of service.

Affected products

• Liblas Liblas: version 1.8.1 only

Published 2018-12-28. Last modified 2026-06-17.