EUVD-2026-42044
GHSA-crhf-3pfg-w68w
Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
AC:H reflects AT:P attack requirement; exploitation needs application-specific GDALRaster bytes usage and vsi_buffer access, not default behavior.
AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L
Primary rating from Vendor (DSF).
CVSS VectorVendor: DSF
Lifecycle Timeline
3Blast Radius
ecosystem impact- 12 pypi packages depend on django (12 direct, 0 indirect)
Ecosystem-wide dependent count for version 5.2.
DescriptionCVE.org
An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. django.contrib.gis.gdal.GDALRaster over-reads its in-memory buffer when constructed from a bytes object, which can disclose adjacent memory or cause service degradation via a potential segmentation fault when the vsi_buffer property is accessed. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Bence Nagy for reporting this issue.
AnalysisAI
Memory over-read in Django's GIS module allows unauthenticated remote attackers to potentially disclose adjacent heap memory or degrade service availability via a segmentation fault. The django.contrib.gis.gdal.GDALRaster class fails to correctly bound its read when constructed from a bytes object, exposing raw memory when the vsi_buffer property is subsequently accessed. Affects Django 6.0 before 6.0.7 and 5.2 before 5.2.16; no public exploit identified at time of analysis and not listed in CISA KEV.
Technical ContextAI
The vulnerability resides in django.contrib.gis.gdal.GDALRaster, the Django wrapper around the GDAL (Geospatial Data Abstraction Library) raster interface. CWE-805 (Buffer Access with Incorrect Length Value) identifies the root cause: when a GDALRaster is instantiated from a raw bytes object, the underlying memory buffer length is not correctly tracked or enforced. When the vsi_buffer property is later accessed - which exposes the in-memory virtual filesystem buffer used by GDAL - the read operation extends beyond the allocated region, either leaking adjacent heap contents or dereferencing an invalid address. This is an in-process memory-safety issue in Python C extension code bridging to the native GDAL library. The CPE cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:* confirms the affected software is the canonical Django package published by the Django Software Foundation.
RemediationAI
Upgrade to Django 6.0.7 or Django 5.2.16, the vendor-released patched versions announced in the Django security release at https://www.djangoproject.com/weblog/2026/jul/07/security-releases/. For applications that cannot upgrade immediately, the primary compensating control is to restrict or disable any code paths that construct GDALRaster objects from untrusted bytes input - specifically, audit all call sites of django.contrib.gis.gdal.GDALRaster(bytes_object) and ensure the bytes source is strictly validated or sourced only from trusted internal data. Blocking unauthenticated access to GIS endpoints that process raster data reduces network exposure. If the vsi_buffer property is not used by your application, removing that access path eliminates the trigger condition, though this is a code-level mitigation that requires application changes. Deployments on unsupported Django series (5.0.x, 4.1.x, 3.2.x) should prioritize upgrading to a supported branch rather than seeking targeted backports.
Wazuh SIEM platform versions 4.4.0 through 4.9.0 contain an unsafe deserialization vulnerability in the DistributedAPI t
BentoML version 1.4.2 and earlier contains an unauthenticated remote code execution vulnerability through insecure deser
pgAdmin 4 contains critical remote code execution vulnerabilities in the Query Tool download and Cloud Deployment endpoi
The renderLocalView function in render/views.py in graphite-web in Graphite 0.9.5 through 0.9.10 uses the pickle Python
BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Rated critica
OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCiph
pyLoad download manager version prior to 0.5.0b3.dev77 exposes the Flask SECRET_KEY through an unauthenticated endpoint.
Langflow (a visual LLM pipeline builder) contains a critical unauthenticated code execution vulnerability (CVE-2026-3301
In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and conse
Unauthenticated remote code execution in Marimo ≤0.20.4 allows attackers to execute arbitrary system commands via the `/
pyLoad is the free and open-source Download Manager written in pure Python. Rated medium severity (CVSS 5.3), this vulne
Cross-user flow execution in Langflow (< 1.9.1) lets any authenticated API-key holder run another user's flow by passing
Same weakness CWE-805 – Buffer Access with Incorrect Length Value
View allSame technique Information Disclosure
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | Fixed |
| openSUSE Leap 16.0 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SUSE Linux Enterprise Module for Package Hub 15 SP7 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | Affected |
| openSUSE Leap 15.6 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today