CVE-2019-25050

CVE-2019-25050 affects netCDF in GDAL 2.4.2 through 3.0.4. The issue is a stack-based buffer overflow in two code paths: nc4_get_att (invoked via nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (invoked from the netCDFDataset destructor). The connected documents consistently describe the ...