9.8
Critical
CVE-2022-0699 A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases
Description
A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attacker to cause a denial of service or have other unspecified impact via control over malloc.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| shapelib | Versions not published |