60 matches found
GDAL 安全漏洞
GDAL is an open-source geospatial data abstraction library developed by GDAL. Versions of gdal prior to 3.11.0 contain security vulnerabilities. These vulnerabilities stem from improper restrictions on memory buffer operations, which may lead to issues with the program file inftree9.C...
AZL-70900 CVE-2025-65018 affecting package gdal 3.6.3-5
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function pngimagefinishread when processing...
The vulnerability of the Microsoft TorchGeo library for working with geospatial data, related to improper code generation management, allows a perpetrator to execute arbitrary code.
The vulnerability of the Microsoft TorchGeo library for working with geospatial data is related to improper code generation management. Exploiting this vulnerability can allow an attacker operating remotely to execute arbitrary code...
Microsoft TorchGeo 代码注入漏洞
Microsoft TorchGeo is a PyTorch domain library from Microsoft Corporation USA that provides datasets, samplers, transformations, and pre-trained models specific to geospatial data. Microsoft TorchGeo suffers from a code injection vulnerability. An attacker exploiting this vulnerability could...
GeoTools Security Vulnerabilities
GeoTools is an open source Java library. Provides tools for geospatial data. A security vulnerability exists in GeoTools that stems from Remote Code Execution RCE that may occur if the application uses certain functions to evaluate XPath expressions provided by user input...
SUSE CVE-2019-17545
GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogrexpat.cpp when the 10MB threshold is exceeded...
SUSE CVE-2019-17546
tifgetimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition...
Vulnerability of the OGRExpatRealloc function in the ogr/ogr_expat.cpp file. The GDAL geospatial transformation library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
Vulnerability of the OGRExpatRealloc function in the ogr/ogrexpat.cpp file. The GDAL geoprocessing library involves repeated memory reclamation. Exploiting this vulnerability may allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...
The vulnerability of the netCDF component of the GDAL library for geospatial data allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the netCDF component of the GDAL transformation library for geospatial data is related to writing beyond buffer boundaries. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures...
Debian: Security Advisory (DLA-2877-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DEBIAN-CVE-2021-45943
GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...
PYSEC-2022-43065
GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...
CVE-2021-45943
GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...
PYSEC-2022-43065
GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...
UBUNTU-CVE-2021-45943
GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment...
GDAL 缓冲区错误漏洞
GDAL is an open source geospatial data abstraction library. A buffer error vulnerability exists in GDAL that stems from the product's PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment functions failing to correctly determine memory boundaries when calling...
GDAL 缓冲区错误漏洞
GDAL is an open source geospatial data abstraction library. A security vulnerability exists in GDAL that stems from a stack-based buffer overflow...
DEBIAN-CVE-2019-17545
GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogrexpat.cpp when the 10MB threshold is exceeded...