Security risk
Posted: Fri Oct 30, 2026 7:18 am
I got the following message from IT regarding the use of CloudCompare at work:
The analyzed packages contain several outdated third-party libraries, including zlib, OpenSSL, as well as additional components used for processing geospatial, image, and file formats.
The analysis identified indications of known vulnerabilities in integrated third-party components that do not appear to have been sufficiently remediated.
Of particular concern is CVE-2021-21897 affecting the integrated dxflib component. This vulnerability is related to the processing of specially crafted DXF files and may lead to memory corruption as well as potential arbitrary code execution.
Looks like I might lose CloudCompare short notice without an alternative.
The analyzed packages contain several outdated third-party libraries, including zlib, OpenSSL, as well as additional components used for processing geospatial, image, and file formats.
The analysis identified indications of known vulnerabilities in integrated third-party components that do not appear to have been sufficiently remediated.
Of particular concern is CVE-2021-21897 affecting the integrated dxflib component. This vulnerability is related to the processing of specially crafted DXF files and may lead to memory corruption as well as potential arbitrary code execution.
Looks like I might lose CloudCompare short notice without an alternative.