AZL-61789 CVE-2025-29480 affecting package gdal 3.6.3-2

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced...

PYSEC-2025-117

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced...

apls (>=0.0.6 <=0.1.0), beratools (=0.2.2) +27 more potentially affected by CVE-2025-29480 via gdal (>=2.1.0 <=3.10.1)

gdal PYPI version =2.1.0, =0.0.6, =0.1.1, =0.0.7, =2.0.1, =0.1.0, =0.10.3, =0.4.5, =0.0.35, =0.1.0, =1.0.60, =1.1.10 and more Source cves: CVE-2025-29480 Source advisory: OSV:PYSEC-2025-117...

AZL-59715 CVE-2025-29480 affecting package gdal 3.6.3-5

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced...

CVE-2025-29480

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced...

UBUNTU-CVE-2025-29480

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced...

CVE-2025-29480

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced...

CVE-2025-29480

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced...

PT-2025-15282 · Gdal +1 · Gdal +1

Name of the Vulnerable Software and Affected Versions: gdal version 3.10.2 Description: The issue is a Buffer Overflow vulnerability that allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. Recommendations: For gdal version 3.10.2, as a temporary...

CVE-2025-29480

CVE-2025-29480 concerns the GDAL library (v3.10.2). The vulnerability occurs in the OGRSpatialReference::Release function and is described as a buffer overflow that could allow a local attacker to cause a denial of service. Multiple connected sources reiterate the same impact and note that the su...

CVE-2025-29480

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced...

CVE-2025-29480

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced...

CVE-2025-29480

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced...

AZL-57639 CVE-2025-1744 affecting package gdal 3.6.3-2

Out-of-bounds Write vulnerability in radareorg radare2 allows heap-based buffer over-read or buffer overflow.This issue affects radare2: before 5.9.9...

AZL-57521 CVE-2025-1744 affecting package gdal 3.6.3-5

Out-of-bounds Write vulnerability in radareorg radare2 allows heap-based buffer over-read or buffer overflow.This issue affects radare2: before 5.9.9...

PT-2025-7067 · Unknown · Zoo-Project

Name of the Vulnerable Software and Affected Versions: ZOO-Project affected versions not specified Description: A vulnerability in the ZOO-Project's WPS implementation allows unauthorized access to files outside the intended directory through path traversal. Specifically, the Gdal Translate...

Denial of Service (DoS)

Overview GDAL is a number of tools for programming and manipulating the GDAL Geospatial Data Abstraction Library. Affected versions of this package are vulnerable to Denial of Service DoS via the GMLASReader class due to improper entity expansion restrictions. Exploiting this vulnerability is...

5dee (=0.1.0), a5py (>=0.1.0 <=0.1.1) +482 more potentially affected by unknown CVE via gdal (>=3.0.1 <=3.9.0)

gdal PYPI version =3.0.1, =0.1.0, =0.0.1, =0.9.0, =0.6.1, =0.1.2, =0.1.1a2, =1.0.1, =1.0.0, =1.9.3, =0.2.0, =1.6.2, =0.0.1, =0.0.5 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-GDAL-8445271...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the GMLASReader class due to improper entity expansion restrictions. Exploiting this vulnerability is possible when parsing specially crafted XML files with recursive entity definitions. Details Denial of Servi...

5dee (=0.1.0), a5py (>=0.1.0 <=0.1.1) +482 more potentially affected by unknown CVE via gdal (>=3.0.1 <=3.9.0)

gdal PYPI version =3.0.1, =0.1.0, =0.0.1, =0.9.0, =0.6.1, =0.1.2, =0.1.1a2, =1.0.1, =1.0.0, =1.9.3, =0.2.0, =1.6.2, =0.0.1, =0.0.5 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-GDAL-8445270...