AZL-104972 CVE-2026-4738 affecting package gdal 3.6.3-2

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal frmts/zlib/contrib/infback9 modules. This vulnerability is associated with program files inftree9.C‎. This issue affects gdal: before 3.11.0...

DEBIAN-CVE-2026-4738

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal frmts/zlib/contrib/infback9 modules. This vulnerability is associated with program files inftree9.C‎. This issue affects gdal: before 3.11.0...

CVE-2026-4738

CVE-2026-4738 affects OSGeo GDAL prior to 3.11.0 and is tied to the zlib-backed infback9 module (frmts/zlib/contrib/infback9). The vulnerability stems from a pointer offset/undefined behavior in inftree9.C that enables heap corruption and potential remote code execution. Official entries consiste...

CVE-2026-4738

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal frmts/zlib/contrib/infback9 modules. This vulnerability is associated with program files inftree9.C‎. This issue affects gdal: before 3.11.0...

CVE-2026-4738

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal frmts/zlib/contrib/infback9 modules. This vulnerability is associated with program files inftree9.C‎. This issue affects gdal: before 3.11.0...

CVE-2026-4738 GDAL Bundled zlib (inftree9.c) Pointer Offset Optimization Undefined Behavior Allows Heap Corruption or Remote Code Execution

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal frmts/zlib/contrib/infback9 modules. This vulnerability is associated with program files inftree9.C‎. This issue affects gdal: before 3.11.0...

CVE-2026-4738: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal frmts/zlib/contrib/infback9 modules. This vulnerability is associated with program files inftree9.C‎. This issue affects gdal: before 3.11.0...

PT-2026-27316

Name of the Vulnerable Software and Affected Versions OSGeo gdal versions prior to 3.11.0 Description A flaw exists in OSGeo gdal related to improper restriction of operations within the bounds of a memory buffer. This issue is located in the frmts/zlib/contrib/infback9 modules, specifically with...

PT-2026-102715

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal frmts/zlib/contrib/infback9 modules. This vulnerability is associated with program files inftree9.C‎. This issue affects gdal: before 3.11.0...

gdal:ogr_miramon_fuzzer: Stack-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6569888155238400 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: ogrmiramonfuzzer Job Type: libfuzzerasani386gdal Platform Id: linux Crash Type: Stack-buffer-overflow READ 5 Crash Address: 0xf6af2c5...

gdal:zarr_fuzzer: Heap-use-after-free in json_object_get

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6311534883307520 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: zarrfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x77c010cf3dd4 Crash...

gdal:gdal_vrt_fuzzer: Crash in gdal_DGifDecompressLine

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6502100292141056 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gdalvrtfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x76f3efed3215 Crash State:...

gdal:gdal_fuzzer: Heap-buffer-overflow in m_low_entropy_ref

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6326469935824896 Project: gdal Fuzzing Engine: afl Fuzz Target: gdalfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x7a3b360f60d0 Crash State:...

gdal:libertiff: Heap-buffer-overflow in PackBitsDecode

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5156180015251456 Project: gdal Fuzzing Engine: afl Fuzz Target: libertiff Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7e83981ed8d0 Crash State:...

AZL-75821 CVE-2026-24793 affecting package gdal 3.6.3-2

Out-of-bounds Write, Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in azerothcore azerothcore-wotlk deps/zlib modules. This vulnerability is associated with program files inflate.C. This issue affects azerothcore-wotlk: through v4.0.0...

AZL-75836 CVE-2026-24793 affecting package gdal 3.6.3-5

Out-of-bounds Write, Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in azerothcore azerothcore-wotlk deps/zlib modules. This vulnerability is associated with program files inflate.C. This issue affects azerothcore-wotlk: through v4.0.0...

gdal:gdal_filesystem_fuzzer: Heap-use-after-free in gdal_fuzzer.cpp

Detailed Report: https://oss-fuzz.com/testcase?key=4528712640167936 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: gdalfilesystemfuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x7c1ff72103bc Crash State: gdalfuzzer.cpp CSLDestroy...

gdal:gdal_fuzzer: Heap-buffer-overflow in m_zero_block

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5868964264869888 Project: gdal Fuzzing Engine: afl Fuzz Target: gdalfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x79534a0e7410 Crash State:...

gdal:gdal_algorithm_fuzzer: Crash in XYZRasterBand::IReadBlock

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5705331782254592 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: gdalalgorithmfuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7b0bb83e00c0 Crash Stat...

gdal:libertiff: Heap-buffer-overflow in PackBitsDecode

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6432047664267264 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: libertiff Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x78366e8e6d9d Crash...