CVE-2025-4640

8.3 highEPSS 0.4%

High (8.3). EPSS 0.4% chance of exploitation in the next 30 days.

Out-of-bounds Write vulnerability in PointCloudLibrary pcl allows Overflow Buffers. Since version 1.14.0, PCL by default uses a zlib installation from the system, unless the user sets WITH_SYSTEM_ZLIB=FALSE. So this potential vulnerability is only relevant if the PCL version is older than 1.14.0 or the user specifically requests to not use the system zlib.

Severity

CVSS 4.0

8.3 high

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/AU:Y/R:U/V:C/RE:L/U:Amber

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2025-05-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/PointCloudLibrary/pcl/blob/master/surface/CMakeLists.txt#L70
https://github.com/PointCloudLibrary/pcl/commit/502bd2b013ce635f21632d523aa8cf2e04f7b7ac
https://github.com/PointCloudLibrary/pcl/pull/6246

Check your stack JSON