← Back

Shapelib

shapelib

Vendor: Osgeo • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Osgeo
1Shapelib
Jun 17, 2026
Oct 17, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attacker to cause a denial of service or have other unspecified impact via control over malloc.