Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

PointCloudLibrary/pcl

              master @ a1e2c4a
            

Fixes

CVEs

CRITICAL

Peak severity

57.1%

Coverage

Highlights

Buffer Overflow: 4 prior fixes. Scrutinize any change in this area.

io/src/ply_io.cpp: most-fixed (2 issues). Treat as high-risk during review.

7 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Buffer Overflow: Critical overflow in zlib inflate when processing gzip extra fields; vendored code is widely used and reachable from file parsing.

Out-of-bounds Write: OBJ parser writes to normal_mapping without validating vertex/normal/texcoord indices, leading to OOB write from malformed OBJ files.

Out-of-bounds Write / Memory Corruption: Unsafe memcpy into cloud data without bounds check; replaced with at() access, but similar patterns may exist in other readers.