Gdal Security Vulnerabilities and Issues — Gdal CVE List

Lucene search

OsgeoGdal

2 matches found

CVE•added 2019/10/14 2:15 a.m.•389 views

CVE-2019-17546

tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition.

8.8CVSS8.6AI score0.00373EPSS

CVE•added 2019/10/14 2:15 a.m.•217 views

CVE-2019-17545

GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded.

9.8CVSS9.3AI score0.01651EPSS