AZL-105081
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-105081.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-105081
- Upstream
- CVE-2026-10758
- Published
- 2026-09-25T21:17:23Z
- Modified
- 2026-10-02T05:31:52Z
- Summary
- CVE-2026-10758 affecting package liblerc 4.0.0-3
- Details
-
Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker controlled imagery to an application that uses LERC to crash the application, leading to a denial of service.
- References