VULNERABILITY INTELLIGENCE
CVE-2025-4640
EPSS probability0.42%
CISA KEVNot currently listed
Published2025-05-14
Last modified2026-06-17
Description
Out-of-bounds Write vulnerability in PointCloudLibrary pcl allows Overflow Buffers. Since version 1.14.0, PCL by default uses a zlib installation from the system, unless the user sets WITH_SYSTEM_ZLIB=FALSE. So this potential vulnerability is only relevant if the PCL version is older than 1.14.0 or the user specifically requests to not use the system zlib.
Weakness classification
- cve_disclosure@tech.gov.sg: CWE-787