CVE-2026-8087

A security flaw has been discovered in OSGeo gdal up to 3.13.0dev-4. Impacted is the function GDnentries of the file frmts/hdf4/hdf-eos/GDapi.c. Performing a manipulation of the argument DataFieldName results in heap-based buffer overflow. The attack must be initiated from a local position. The...

Linux Distros Unpatched Vulnerability : CVE-2021-45943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile called from PCIDSK::CPCIDSKSegment::ReadFromFile and...

PT-2021-7494 · Gdal +1 · Gdal +1

Name of the Vulnerable Software and Affected Versions: GDAL versions 3.3.0 through 3.4.0 Description: The issue is related to a heap-based buffer overflow in the PCIDSK::CPCIDSKFile::ReadFromFile function, which can be exploited by a remote attacker to cause a denial of service. This function is...

PYSEC-2021-888

netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4getatt called from nc4getatttc and ncgetatttext and in uffdcleanup called from netCDFDataset::netCDFDataset and netCDFDataset::netCDFDataset...

CVE-2019-25050

CVE-2019-25050 affects netCDF in GDAL 2.4.2 through 3.0.4. The issue is a stack-based buffer overflow in two code paths: nc4_get_att (invoked via nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (invoked from the netCDFDataset destructor). The connected documents consistently describe the ...