Osgeo Shapelib vulnerabilities

1 vulnerability

Known vulnerabilities in Osgeo Shapelib, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2022-0699debianshapelib+6
EPSS score
1.66%
A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attacker to cause a denial of service or have other unspecified impact via control over malloc.