CVE-2025-52937

2.0 lowEPSS 0.1%

Low (2.0). EPSS 0.1% chance of exploitation in the next 30 days.

Vulnerability in PointCloudLibrary PCL (surface/src/3rdparty/opennurbs modules). This vulnerability is associated with program files crc32.C. This vulnerability is only relevant if the PCL version is older than 1.14.0 or the user specifically requests to not use the system zlib (WITH_SYSTEM_ZLIB=FALSE).

Severity

CVSS 4.0

2.0 low

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:N/AU:N/R:A/V:D/RE:M/U:Green

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWE: CWE-494
Published: 2025-06-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/PointCloudLibrary/pcl/commit/2f9dc390c6769fbd821fafa0e16f4707ed7c5d79
https://github.com/PointCloudLibrary/pcl/pull/6275

Check your stack JSON