{"id":"CVE-2026-10758","aliases":["AZL-105081","EUVD-2026-87360","GHSA-cw29-mw7w-pj37","GHSA-gfc2-qmh7-jf3x","RHSA-2026:45254"],"status":"published","title":"Esri Lerc has a security vulnerability","description":"Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker controlled imagery to an application that uses LERC to crash the application, leading to a denial of service.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00328,"percentile":0.26104,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2026-09-25T20:49:43Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Red Hat:hummingbird:1","package":"liblerc","fixed_in":["0:4.2.0-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"liblerc-devel","fixed_in":["0:4.2.0-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"mingw32-liblerc","fixed_in":["0:4.2.0-1.hum1"],"sources":["osv"]},{"ecosystem":"Red Hat:hummingbird:1","package":"mingw64-liblerc","fixed_in":["0:4.2.0-1.hum1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"liblerc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.0.0-3"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"liblerc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"liblerc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mingw32-liblerc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-1.hum1"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"mingw64-liblerc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.0-1.hum1"}]}]}],"products":[{"vendor":"esri","product":"lerc"}],"references":[{"url":"https://github.com/Esri/lerc/security/advisories/GHSA-cw29-mw7w-pj37","tags":["advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10758","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-gfc2-qmh7-jf3x"},{"url":"https://access.redhat.com/errata/RHSA-2026:45254","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-10758","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_45254.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2541654","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-10758","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-10758","title":"Esri Lerc has a security vulnerability","description":"Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker controlled imagery to an application that uses LERC to crash the application, leading to a denial of service.","status":"published","published":"2026-09-25T20:49:43.438Z","modified":"2026-09-26T22:51:18.457Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T13:40:12.486331Z"}],"euvd":[{"id":"EUVD-2026-87360","description":"Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker controlled imagery to an application that uses LERC to crash the application, leading to a denial of service.","status":"published","published":"2026-09-25T20:49:43Z","modified":"2026-09-26T22:51:18Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T17:27:54.286776Z"}],"ghsa":[{"id":"GHSA-gfc2-qmh7-jf3x","title":"Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for...","description":"Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker controlled imagery to an application that uses LERC to crash the application, leading to a denial of service.","status":"published","published":"2026-09-25T21:33:04Z","modified":"2026-09-25T21:33:12Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T15:12:27.845198Z"}],"nvd":[{"id":"CVE-2026-10758","description":"Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker controlled imagery to an application that uses LERC to crash the application, leading to a denial of service.","status":"published","published":"2026-09-25T21:17:23.117Z","modified":"2026-09-30T19:56:45.443Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:12:51.721923Z"}],"osv":[{"id":"CVE-2026-10758","description":"Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker controlled imagery to an application that uses LERC to crash the application, leading to a denial of service.","status":"published","published":"2026-09-25T21:17:23.117Z","modified":"2026-10-20T11:50:10.59241422Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:54.933106Z"},{"id":"RHSA-2026:45254","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-10-20T10:09:32Z","modified":"2026-10-20T10:32:18.817005519Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"AZL-105081","title":"CVE-2026-10758 affecting package liblerc 4.0.0-3","description":"Esri LERC is an open-source image or raster format which supports rapid encoding and decoding for any pixel type. A Heap based Out-of-Bounds Write via Integer Overflow in LERC versions 4.1.0 and earlier may allow a remote, unauthenticated attacker who can pass specifically crafted attacker controlled imagery to an application that uses LERC to crash the application, leading to a denial of service.","status":"published","published":"2026-09-25T21:17:23Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:17.719431Z"}]}}