OSV-2020-392
Stack-buffer-overflow in nc4_get_att
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15143
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
nc4_get_att
nc4_get_att_tc
nc_get_att_text
What each source reports
OSV No score
Stack-buffer-overflow in nc4_get_att
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15143
Crash type: Stack-buffer-overflow WRITE {*}
Crash state:
nc4_get_att
nc4_get_att_tc
nc_get_att_text
- Record
OSV-2020-392- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gdalOSS-Fuzz |
Listed versions, plus commit ranges v2.4.2v2.4.3v2.4.3RC1v2.4.4v2.4.4RC1 Show 7 moreShow lessv3.0.1v3.0.2v3.0.2RC1v3.0.3v3.0.3RC1v3.0.4v3.0.4RC1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2020-392 is a vulnerability with no CVSS score yet in gdal, published July 1, 2020. No source lists public exploit code. A source reports a fix.