CVE-2022-0699: OSGeo Shapelib

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attacker to cause a denial of service or have other unspecified impact via control over malloc.

Affected products

• OSGeo Shapelib: up to and including 1.5.0

Published 2022-10-17. Last modified 2026-06-17.