AZL-74499 CVE-2026-22801 affecting package gdal 3.6.3-5

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng simplified write API functions pngwriteimage16bit and pngwriteimage8bit causes heap buffer...

gdal:gdal_algorithm_fuzzer: Stack-buffer-overflow in GRIBDataset::OpenMultiDim

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6502492711223296 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: gdalalgorithmfuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

gdal:mrf_fuzzer: Crash in gdal__TIFFGetStrileOffsetOrByteCountValue

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6711906619686912 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: mrffuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7bcf8ba74200 Crash State:...

gdal:gtiff_fuzzer: Heap-buffer-overflow in gdal_TIFFReadScanline

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=6022671491203072 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: gtifffuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 7 Crash Address: 0x796dbe1e3d93 Cra...

AZL-71458 CVE-2025-66293 affecting package gdal 3.6.3-2

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond the pngsRGBbase512 array when processing...

AZL-71488 CVE-2025-66293 affecting package gdal 3.6.3-5

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond the pngsRGBbase512 array when processing...

JLSEC-2025-254 `tif_getimage.c` in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an...

tifgetimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition...

EUVD-2019-0057

Malware in sbrugna...

EUVD-2005-3580

Malware in sbrugna...

EUVD-2019-7895

Malware in sbrugna...

EUVD-2021-0091

Malware in sbrugna...

EUVD-2022-0111

Malicious code in bioql PyPI...

EUVD-2025-10311

Malicious code in bioql PyPI...

gdal:gdal_translate_fuzzer: Heap-buffer-overflow in CPLErr GDALResampleChunk_ConvolutionInternal<true, true>

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5520703391858688 Project: gdal Fuzzing Engine: honggfuzz Fuzz Target: gdaltranslatefuzzer Job Type: honggfuzzasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

Linux Distros Unpatched Vulnerability : CVE-2021-45943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and...

Linux Distros Unpatched Vulnerability : CVE-2019-17545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogrexpat.cpp when the 10MB threshold is exceeded. CVE-2019-17545 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2019-25050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4getatt called from nc4getatttc and ncgetatttext and in uffdcleanup called from...

Linux Distros Unpatched Vulnerability : CVE-2019-17546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tifgetimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer...

gdal:lvbag_fuzzer: Crash in printf_common

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=4605951188992000 Project: gdal Fuzzing Engine: libFuzzer Fuzz Target: lvbagfuzzer Job Type: libfuzzerasangdal Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x01ff8188b2c8 Crash State:...

gdal:gdal_algorithm_fuzzer: Heap-buffer-overflow in WCSUtils::URLRemoveKey

Project: https://github.com/OSGeo/gdal.git Detailed Report: https://oss-fuzz.com/testcase?key=5811762182291456 Project: gdal Fuzzing Engine: afl Fuzz Target: gdalalgorithmfuzzer Job Type: aflasangdal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x50600001417f Crash...