Linux Distros Unpatched Vulnerability : CVE-2026-4738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal frmts/zlib/contrib/infback9 modules. This vulnerability is...

CVE-2026-4738

CVE-2026-4738 affects OSGeo GDAL prior to 3.11.0 and is tied to the zlib-backed infback9 module (frmts/zlib/contrib/infback9). The vulnerability stems from a pointer offset/undefined behavior in inftree9.C that enables heap corruption and potential remote code execution. Official entries consiste...

CVE-2026-4738 GDAL Bundled zlib (inftree9.c) Pointer Offset Optimization Undefined Behavior Allows Heap Corruption or Remote Code Execution

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal frmts/zlib/contrib/infback9 modules. This vulnerability is associated with program files inftree9.C‎. This issue affects gdal: before 3.11.0...

PT-2026-27316

Name of the Vulnerable Software and Affected Versions OSGeo gdal versions prior to 3.11.0 Description A flaw exists in OSGeo gdal related to improper restriction of operations within the bounds of a memory buffer. This issue is located in the frmts/zlib/contrib/infback9 modules, specifically with...

EUVD-2021-0091

Malware in sbrugna...

EUVD-2005-3580

Malware in sbrugna...

EUVD-2025-10311

Malicious code in bioql PyPI...

EUVD-2022-0111

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2019-17545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogrexpat.cpp when the 10MB threshold is exceeded. CVE-2019-17545 Note that Nessus...

CVE-2025-29480

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced...

AZL-61789 CVE-2025-29480 affecting package gdal 3.6.3-2

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced...

apls (>=0.0.6 <=0.1.0), beratools (=0.2.2) +27 more potentially affected by CVE-2025-29480 via gdal (>=2.1.0 <=3.10.1)

gdal PYPI version =2.1.0, =0.0.6, =0.1.1, =0.0.7, =2.0.1, =0.1.0, =0.10.3, =0.4.5, =0.0.35, =0.1.0, =1.0.60, =1.1.10 and more Source cves: CVE-2025-29480 Source advisory: OSV:PYSEC-2025-117...

CVE-2025-29480

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced...

CVE-2025-29480

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced...

CVE-2025-29480

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced...

5dee (=0.1.0), a5py (>=0.1.0 <=0.1.1) +482 more potentially affected by unknown CVE via gdal (>=3.0.1 <=3.9.0)

gdal PYPI version =3.0.1, =0.1.0, =0.0.1, =0.9.0, =0.6.1, =0.1.2, =0.1.1a2, =1.0.1, =1.0.0, =1.9.3, =0.2.0, =1.6.2, =0.0.1, =0.0.5 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-GDAL-8445271...

5dee (=0.1.0), a5py (>=0.1.0 <=0.1.1) +482 more potentially affected by unknown CVE via gdal (>=3.0.1 <=3.9.0)

gdal PYPI version =3.0.1, =0.1.0, =0.0.1, =0.9.0, =0.6.1, =0.1.2, =0.1.1a2, =1.0.1, =1.0.0, =1.9.3, =0.2.0, =1.6.2, =0.0.1, =0.0.5 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-GDAL-8445270...

afwizard (=1.0.1), frontpy (>=0.1.6 <=0.1.14) +4 more potentially affected by CVE-2021-45943 via gdal (>=3.3.2 <=3.4.0)

gdal PYPI version =3.3.2, =0.1.6, =0.1.1, =0.1.0, =0.2.4, =0.1.3, =0.1.4 Source cves: CVE-2021-45943 Source advisory: OSV:PYSEC-2022-43065...

UBUNTU-CVE-2019-25050

netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4getatt called from nc4getatttc and ncgetatttext and in uffdcleanup called from netCDFDataset::netCDFDataset and netCDFDataset::netCDFDataset...

GDAL Double Release Vulnerability

GDAL is an open source software library for manipulating various raster and vector geospatial data formats. A poolDestroy double-release vulnerability exists in OGRExpatRealloc in ogr/ogrexpat.cpp in GDAL 3.0.1 and earlier when the 10MB threshold is exceeded, and no detailed vulnerability details...