Skip to contentOsgeo Gdal vulnerabilities
- gdalGDAL: scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflowCVE-2026-49014Fix available7.4 High
- osgeo gdalOSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflowCVE-2026-8213Fix available4.8 Medium
- osgeo gdalOSGeo gdal SWapi.c SWSDfldsrch heap-based overflowCVE-2026-8212Fix available4.8 Medium
- osgeo gdalOSGeo gdal GDapi.c GDfieldinfo out-of-boundsCVE-2026-8088Fix available4.8 Medium
- osgeo gdalOSGeo gdal GDapi.c GDnentries heap-based overflowCVE-2026-8087Fix available4.8 Medium
- osgeo gdalOSGeo gdal SWapi.c SWnentries heap-based overflowCVE-2026-8086Fix available4.8 Medium
- osgeo gdalOSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-boundsCVE-2026-8084Fix available4.8 Medium
- osgeo gdalGDAL Bundled zlib (inftree9.c) Pointer Offset Optimization Undefined Behavior Allows Heap Corruption or Remote Code ExecutionCVE-2026-4738Fix available9.4 Critical
- osgeo gdalBuffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service...CVE-2025-29480Fix availableDisputed5.5 Medium
- osgeo gdal, debian linux, fedoraproject fedora +1 more +3 moreGDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile ...CVE-2021-45943Fix available5.5 Medium
- osgeo gdalnetCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from...CVE-2019-25050Fix available7.8 High
- osgeo gdal, debian linux, fedoraproject fedora +3 more +5 moreGDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the...CVE-2019-17545Fix available9.8 Critical
- libtiff, osgeo gdal +1 moretif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has...CVE-2019-17546Fix available8.8 High