CVE catalog

CVE-2024-53432

PCL vulnerability

Severity: Medium
Published: Nov 21, 2024, 6:15:14 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.71% · Oct 27, 2026

While parsing certain malformed PLY files, PCL version 1.14.1 crashes due to an uncaught std::out_of_range exception in PCLPointCloud2::at. This issue could potentially be exploited to cause a denial-of-service (DoS) attack when processing untrusted PLY files.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	pcl	sid	`1.15.1+dfsg-4`	fixed
Debian	pcl	forky	`1.15.1+dfsg-4`	fixed
Debian	pcl	trixie	`1.15.0+dfsg-2`	fixed
Debian	pcl	bookworm	`1.13.0+dfsg-3`	vulnerable
Ubuntu	pcl	noble	Not reported	vulnerable
Ubuntu	pcl	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-apps1.14	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-common1.14	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-dev	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-doc	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-features1.14	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-filters1.14	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-io1.14	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-kdtree1.14	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-keypoints1.14	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-ml1.14	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-octree1.14	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-outofcore1.14	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-people1.14	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-recognition1.14	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-registration1.14	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-sample-consensus1.14	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-search1.14	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-segmentation1.14	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-stereo1.14	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-surface1.14	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-tracking1.14	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	libpcl-visualization1.14	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	pcl-tools	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed
Ubuntu	pcl	pro	`1.13.0+dfsg-3`	vulnerable
Ubuntu	pcl	pro	`1.13.0+dfsg-3build1`	vulnerable
Ubuntu	pcl	pro	`1.13.0+dfsg-4`	vulnerable
Ubuntu	pcl	pro	`1.13.0+dfsg-4build2`	vulnerable
Ubuntu	pcl	pro	`1.13.0+dfsg-4build3`	vulnerable
Ubuntu	pcl	pro	`1.14.0+dfsg-1`	vulnerable
Ubuntu	pcl	pro	`1.14.0+dfsg-1ubuntu0.1~esm1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	pcl	source	sid	`1.15.0+dfsg-2`	not yet assigned	Not reported	[1088186]
Debian	pcl	source	forky	`1.15.0+dfsg-2`	not yet assigned	Not reported	[1088186]
Debian	pcl	source	trixie	`1.15.0+dfsg-2`	not yet assigned	Not reported	[1088186]
Debian	pcl	source	bookworm	`(unfixed)`	not yet assigned	Not reported	[1088186]
Ubuntu	pcl	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-apps1.14	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-common1.14	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-dev	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-doc	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-features1.14	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-filters1.14	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-io1.14	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-kdtree1.14	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-keypoints1.14	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-ml1.14	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-octree1.14	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-outofcore1.14	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-people1.14	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-recognition1.14	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-registration1.14	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-sample-consensus1.14	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-search1.14	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-segmentation1.14	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-stereo1.14	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-surface1.14	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-tracking1.14	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	libpcl-visualization1.14	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	pcl-tools	deb	noble	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	pcl	deb	pro	`1.14.0+dfsg-1ubuntu0.1~esm1`	Not reported	USN-7227-1	Not reported

[Debian bug #1088186]

Notes

[bookworm] pcl: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libpcl-apps1.13]Affected
Source package: [pcl]
Details (2)
- 1.13.0+dfsg-3 · amd64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
- 1.13.0+dfsg-3 · arm64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
[libpcl-common1.13]Affected
Source package: [pcl]
Details (2)
- 1.13.0+dfsg-3 · amd64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
- 1.13.0+dfsg-3 · arm64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
[libpcl-dev]Affected
Source package: [pcl]
Details (2)
- 1.13.0+dfsg-3 · amd64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
- 1.13.0+dfsg-3 · arm64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
[libpcl-doc]Affected
Source package: [pcl]
Details (2)
- 1.13.0+dfsg-3 · all · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
- 1.13.0+dfsg-3 · all · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
[libpcl-features1.13]Affected
Source package: [pcl]
Details (2)
- 1.13.0+dfsg-3 · amd64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
- 1.13.0+dfsg-3 · arm64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
[libpcl-filters1.13]Affected
Source package: [pcl]
Details (2)
- 1.13.0+dfsg-3 · amd64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
- 1.13.0+dfsg-3 · arm64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
[libpcl-io1.13]Affected
Source package: [pcl]
Details (2)
- 1.13.0+dfsg-3 · amd64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
- 1.13.0+dfsg-3 · arm64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
[libpcl-kdtree1.13]Affected
Source package: [pcl]
Details (2)
- 1.13.0+dfsg-3 · amd64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
- 1.13.0+dfsg-3 · arm64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
[libpcl-keypoints1.13]Affected
Source package: [pcl]
Details (2)
- 1.13.0+dfsg-3 · amd64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
- 1.13.0+dfsg-3 · arm64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
[libpcl-ml1.13]Affected
Source package: [pcl]
Details (2)
- 1.13.0+dfsg-3 · amd64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
- 1.13.0+dfsg-3 · arm64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
[libpcl-octree1.13]Affected
Source package: [pcl]
Details (2)
- 1.13.0+dfsg-3 · amd64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
- 1.13.0+dfsg-3 · arm64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
[libpcl-outofcore1.13]Affected
Source package: [pcl]
Details (2)
- 1.13.0+dfsg-3 · amd64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
- 1.13.0+dfsg-3 · arm64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
[libpcl-people1.13]Affected
Source package: [pcl]
Details (2)
- 1.13.0+dfsg-3 · amd64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
- 1.13.0+dfsg-3 · arm64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
[libpcl-recognition1.13]Affected
Source package: [pcl]
Details (2)
- 1.13.0+dfsg-3 · amd64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
- 1.13.0+dfsg-3 · arm64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
[libpcl-registration1.13]Affected
Source package: [pcl]
Details (2)
- 1.13.0+dfsg-3 · amd64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
- 1.13.0+dfsg-3 · arm64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
[libpcl-sample-consensus1.13]Affected
Source package: [pcl]
Details (2)
- 1.13.0+dfsg-3 · amd64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
- 1.13.0+dfsg-3 · arm64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
[libpcl-search1.13]Affected
Source package: [pcl]
Details (2)
- 1.13.0+dfsg-3 · amd64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
- 1.13.0+dfsg-3 · arm64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
[libpcl-segmentation1.13]Affected
Source package: [pcl]
Details (2)
- 1.13.0+dfsg-3 · amd64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
- 1.13.0+dfsg-3 · arm64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
[libpcl-stereo1.13]Affected
Source package: [pcl]
Details (2)
- 1.13.0+dfsg-3 · amd64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
- 1.13.0+dfsg-3 · arm64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
[libpcl-surface1.13]Affected
Source package: [pcl]
Details (2)
- 1.13.0+dfsg-3 · amd64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12
- 1.13.0+dfsg-3 · arm64 · bookworm
  Affected
  usn · pcl · debian · bookworm; usn · pcl · debian · 12

Next results

Observed: Oct 27, 2026, 12:37:20 AM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Ubuntu Security Notices (USN)]