BIT-DJANGO-2026-15830 Potential denial-of-service vulnerability via nested geometry collections

An issue was discovered in Django 6.0 before 6.0.9 and 5.2 before 5.2.18. GeoDjango's django.contrib.gis.geos.GEOSGeometry is subject to a potential denial-of-service when parsing deeply nested GEOMETRYCOLLECTION objects supplied as well-known text WKT, well-known binary WKB, or hex-encoded WKB,...

PYSEC-2026-3717

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8.GeoDjango's django.contrib.gis.geos.GEOSGeometry is subject to a potential denial-of-service when parsing deeply nested GEOMETRYCOLLECTION objects supplied as well-known text WKT, well-known binary WKB, or hex-encoded WKB,...

UBUNTU-CVE-2026-15830

An issue was discovered in Django 6.0 before 6.0.9 and 5.2 before 5.2.18. GeoDjango's django.contrib.gis.geos.GEOSGeometry is subject to a potential denial-of-service when parsing deeply nested GEOMETRYCOLLECTION objects supplied as well-known text WKT, well-known binary WKB, or hex-encoded WKB,...

CVE-2026-15830

Django 5.2 before 5.2.17 and 6.0 before 6.0.8 contain a DoS in GeoDjango’s GEOSGeometry when parsing deeply nested GEOMETRYCOLLECTIONs supplied as WKT, WKB, or hex-WKB. The issue triggers unbounded recursion in GEOS, causing a segmentation fault and affecting spatial field lookups and the django....

CVE-2026-15830 Potential denial-of-service vulnerability via nested geometry collections

An issue was discovered in Django 6.0 before 6.0.9 and 5.2 before 5.2.18. GeoDjango's django.contrib.gis.geos.GEOSGeometry is subject to a potential denial-of-service when parsing deeply nested GEOMETRYCOLLECTION objects supplied as well-known text WKT, well-known binary WKB, or hex-encoded WKB,...

CVE-2026-15830 Potential denial-of-service vulnerability via nested geometry collections

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango's django.contrib.gis.geos.GEOSGeometry is subject to a potential denial-of-service when parsing deeply nested GEOMETRYCOLLECTION objects supplied as well-known text WKT, well-known binary WKB, or hex-encoded WKB,...

CVE-2026-15830

An issue was discovered in Django 6.0 before 6.0.9 and 5.2 before 5.2.18. GeoDjango's django.contrib.gis.geos.GEOSGeometry is subject to a potential denial-of-service when parsing deeply nested GEOMETRYCOLLECTION objects supplied as well-known text WKT, well-known binary WKB, or hex-encoded WKB,...

Retrieving Deleted Files on the Commodore C64 in 1987

When I was a sophomore in high school, from 1987 to 1988, my friend Paul and I had Commodore C64 computers. There was a new graphical user interface called GEOS that had transformed the way we interacted with our computers. We used the C64 to play games but also write papers for school. One day...

geos:fuzz_geo2: Bad-cast to const MultiLineString from geos::geom::MultiCurve in geos::io::WKTWriter::appendGeometryTaggedText

Detailed Report: https://oss-fuzz.com/testcase?key=6638280593440768 Project: geos Fuzzing Engine: libFuzzer Fuzz Target: fuzzgeo2 Job Type: libfuzzerubsangeos Platform Id: linux Crash Type: Bad-cast Crash Address: 0x556cccaf5a10 Crash State: Bad-cast to const MultiLineString from...

geos:fuzz_geo2: Heap-buffer-overflow in geos::geom::CoordinateXYZM geos::algorithm::LineIntersector::intersection<geos::

Detailed Report: https://oss-fuzz.com/testcase?key=4507976691744768 Project: geos Fuzzing Engine: honggfuzz Fuzz Target: fuzzgeo2 Job Type: honggfuzzasangeos Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x604000000880 Crash State: geos::geom::CoordinateXYZM...

geos:fuzz_geo2: Bad-cast to const geos::geom::Polygon from geos::geom::LineString in geos::operation::overlayng::OverlayMixedPoints::extractPolygons

Detailed Report: https://oss-fuzz.com/testcase?key=4698953031745536 Project: geos Fuzzing Engine: libFuzzer Fuzz Target: fuzzgeo2 Job Type: libfuzzerubsangeos Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000003488e50 Crash State: Bad-cast to const geos::geom::Polygon from...

OSV-2022-904 Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<geos::geom::Coor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51406 Crash type: Heap-use-after-free READ 8 Crash state: std::1::pairstd::1::treeiteratorstd::1::valuetypegeos::geom::Coor geos::geomgraph::NodeMap::addNode geos::geomgraph::GeometryGraph::addSelfIntersectionNode...

PT-2022-37286

Name of the Vulnerable Software and Affected Versions geos affected versions not specified Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This error is identified in the...

geos:fuzz_geo2: Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<geos::geom::Coor

Detailed Report: https://oss-fuzz.com/testcase?key=5892012011814912 Project: geos Fuzzing Engine: libFuzzer Fuzz Target: fuzzgeo2 Job Type: libfuzzerasangeos Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x60a000001bd8 Crash State:...

OSV-2022-861 Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<geos::geom::Coor

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51083 Crash type: Heap-use-after-free READ 8 Crash state: std::1::pairstd::1::treeiteratorstd::1::valuetypegeos::geom::Coor geos::geomgraph::NodeMap::addNode geos::operation::overlay::OverlayOp::copyPoints...

PT-2022-37258 · Geos · Geos

Name of the Vulnerable Software and Affected Versions: GEOS affected versions not specified Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to a crash. The error is specifically...

geos:fuzz_geo2: Heap-use-after-free in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<geos::geom::Coor

Detailed Report: https://oss-fuzz.com/testcase?key=6314252360613888 Project: geos Fuzzing Engine: libFuzzer Fuzz Target: fuzzgeo2 Job Type: libfuzzerasangeos Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6150004b9318 Crash State:...

Fedora: Security Advisory for geos (FEDORA-2022-6746739d52)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: geos-3.10.2-4.fc36

GEOS Geometry Engine - Open Source is a C++ port of the Java Topology Suite JTS. As such, it aims to contain the complete functionality of JTS in C++. This includes all the OpenGIS "Simple Features for SQL" spatial predicate functions and spatial operators, as well as specific JTS topology...

geos:fuzz_geo2: Heap-buffer-overflow in geos::operation::valid::PolygonNode::isInteriorSegment

Detailed Report: https://oss-fuzz.com/testcase?key=5375499348606976 Project: geos Fuzzing Engine: afl Fuzz Target: fuzzgeo2 Job Type: aflasangeos Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60d000110e60 Crash State:...