{"id":"CVE-2025-52937","state":"PUBLISHED","title":"Vulnerability in PointCloudLibrary PCL","description":"Vulnerability in PointCloudLibrary PCL (surface/src/3rdparty/opennurbs modules). This vulnerability is associated with program files crc32.C.\n\nThis vulnerability is only relevant if the PCL version is older than 1.14.0 or the user specifically requests to not use the system zlib (WITH_SYSTEM_ZLIB=FALSE).","publishedAt":"2025-06-23T09:26:12.727Z","updatedAt":"2025-06-23T13:26:46.248Z","severity":{"score":2,"label":"Low","version":"4.0","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:N/AU:N/R:A/V:D/RE:M/U:Green","source":"GovTech CSG"},"assigner":"GovTech CSG","products":["PointCloudLibrary pcl"],"affected":[{"vendor":"PointCloudLibrary","product":"pcl","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.14.0","versionType":"git"}],"modules":["surface/src/3rdparty/opennurbs"],"programFiles":["crc32.c"],"repo":"https://github.com/PointCloudLibrary/pcl"}],"references":["https://github.com/PointCloudLibrary/pcl/pull/6275","https://github.com/PointCloudLibrary/pcl/commit/2f9dc390c6769fbd821fafa0e16f4707ed7c5d79"],"weaknesses":["CWE-494"],"ingestedAt":"2026-10-29T20:09:31.862Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/52xxx/CVE-2025-52937.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-52937","state":"PUBLISHED","datePublished":"2025-06-23T09:26:12.727Z","dateUpdated":"2025-06-23T13:26:46.248Z","assignerShortName":"GovTech CSG","assignerOrgId":"1a37b84a-8e51-4525-b3d6-87e2fae01dbd","dateReserved":"2025-06-23T09:24:36.336Z"},"containers":{"cna":{"title":"Vulnerability in PointCloudLibrary PCL","descriptions":[{"lang":"en","value":"Vulnerability in PointCloudLibrary PCL (surface/src/3rdparty/opennurbs modules). This vulnerability is associated with program files crc32.C.\n\nThis vulnerability is only relevant if the PCL version is older than 1.14.0 or the user specifically requests to not use the system zlib (WITH_SYSTEM_ZLIB=FALSE)."}],"affected":[{"vendor":"PointCloudLibrary","product":"pcl","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.14.0","versionType":"git"}],"modules":["surface/src/3rdparty/opennurbs"],"programFiles":["crc32.c"],"repo":"https://github.com/PointCloudLibrary/pcl"}],"references":[{"url":"https://github.com/PointCloudLibrary/pcl/pull/6275","tags":["patch","third-party-advisory"]},{"url":"https://github.com/PointCloudLibrary/pcl/commit/2f9dc390c6769fbd821fafa0e16f4707ed7c5d79","tags":["patch"]}],"metrics":[{"cvssV4_0":{"Automatable":"NO","Recovery":"AUTOMATIC","Safety":"NEGLIGIBLE","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"LOCAL","baseScore":2,"baseSeverity":"LOW","privilegesRequired":"LOW","providerUrgency":"GREEN","subAvailabilityImpact":"LOW","subConfidentialityImpact":"LOW","subIntegrityImpact":"LOW","userInteraction":"NONE","valueDensity":"DIFFUSE","vectorString":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:N/AU:N/R:A/V:D/RE:M/U:Green","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnerabilityResponseEffort":"MODERATE"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"providerMetadata":{"shortName":"GovTech CSG","orgId":"1a37b84a-8e51-4525-b3d6-87e2fae01dbd","dateUpdated":"2025-06-23T09:26:12.727Z"},"credits":[{"lang":"en","type":"reporter","value":"TITAN Team (titancaproject@gmail.com)"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-06-23T13:26:43.507468Z","id":"CVE-2025-52937","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-494","type":"CWE","lang":"en","description":"CWE-494 Download of Code Without Integrity Check"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-06-23T13:26:46.248Z"}}]}}}