CVE-2026-8086

OSGeo GDAL contains a local heap-based buffer overflow in SWnentries (SWapi.c) affecting versions up to 3.13.0dev-4. The vulnerability arises from incorrect handling of DimensionName. Local exploitation is possible; a public exploit exists. Remediation: upgrade to 3.12.4RC1 (patch 9491e794f1757f0...

CVE-2026-8086 OSGeo gdal SWapi.c SWnentries heap-based overflow

A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4. This issue affects the function SWnentries of the file frmts/hdf4/hdf-eos/SWapi.c. Such manipulation of the argument DimensionName leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly...

CVE-2026-8086 OSGeo gdal SWapi.c SWnentries heap-based overflow

A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4. This issue affects the function SWnentries of the file frmts/hdf4/hdf-eos/SWapi.c. Such manipulation of the argument DimensionName leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly...