Skip to content
Ubuntu Shapelib Vulnerability Allows Code Execution via Crafted Files

Ubuntu Shapelib Vulnerability Allows Code Execution via Crafted Files

First seen 3 Nov 2026, 22:45 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 3, 2026 at 22:46 UTC

A serious vulnerability in the Shapelib library, specifically in the shpsort utility, has been discovered, allowing attackers to potentially execute arbitrary code or cause a denial of service. This flaw arises from improper handling of certain inputs leading to a double-free condition. Affected systems include Ubuntu 22.04 LTS, 20.04 LTS, 18.04 LTS, and 16.04 LTS, with specific package versions noted for updates. Users are advised to apply the latest updates to mitigate the risk. The vulnerability does not appear to be in the wild at this time, but it is for users to update their systems promptly. The issue has been documented in Ubuntu Security Notice USN-8992-1.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 6h ago How this analysis works

Timeline

2026-11-03
Vulnerability disclosed
Ubuntu released USN-8992-1 detailing the Shapelib vulnerability affecting multiple LTS versions.
Ubuntu

More articles in this cluster (3)

Following this threat?

Track Ubuntu in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 2

Common questions

Which versions of Ubuntu are affected?
Ubuntu 22.04 LTS, 20.04 LTS, 18.04 LTS, and 16.04 LTS are affected.
What should I do to protect my system?
Update your system to the latest package versions as detailed in the advisory.
Is there evidence of active exploitation?
No evidence of active exploitation has been reported at this time.