CVE-2025-52937

Vulnerability in PointCloudLibrary PCL

State: Published
Severity: 2.0 Low
Published: Jun 23, 2025
Updated: Jun 23, 2025
Reserved: Jun 23, 2025

Description

Vulnerability in PointCloudLibrary PCL (surface/src/3rdparty/opennurbs modules). This vulnerability is associated with program files crc32.C.

This vulnerability is only relevant if the PCL version is older than 1.14.0 or the user specifically requests to not use the system zlib (WITH_SYSTEM_ZLIB=FALSE).

Scores

CVSS	Score	Vector	Source
4.0	2.0 Low	CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:N/AU:N/R:A/V:D/RE:M/U:Green	GovTech CSG

Weaknesses

CWE-494 Download of Code Without Integrity Check

Affected Products

Product	Versions
pclPointCloudLibrary	before 1.14.0Affected

References

https://github.com/PointCloudLibrary/pcl/pull/6275patchthird-party-advisory
https://github.com/PointCloudLibrary/pcl/commit/2f9dc390c6769fbd821fafa0e16f4707ed7c5d79patch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.