CVE-2022-0699 — n/a / shapelib

Description (CNA)

A double-free condition exists in contrib/shpsort.c of shapelib 1.5.0 and older releases. This issue may allow an attacker to cause a denial of service or have other unspecified impact via control over malloc.

Affected (CNA)

Vendor / product	Versions
n/a / shapelib	affected shapelib 1.5.0 and older releases

CWE

CWE-416

References

https://github.com/OSGeo/shapelib/issues/39
https://github.com/OSGeo/shapelib/commit/c75b9281a5b9452d92e1682bdfe6019a13ed819f

ADP enrichment

CVE

No English description supplied.

https://github.com/OSGeo/shapelib/issues/39
https://github.com/OSGeo/shapelib/commit/c75b9281a5b9452d92e1682bdfe6019a13ed819f
https://lists.debian.org/debian-lts-announce/2026/01/msg00023.html

CISA-ADP

No English description supplied.

No references supplied.