EUVD-2026-77802
GHSA-pr85-w493-9w3x
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Reachable over the network only when wrapped in a file-parsing webservice, but a malicious file must still be supplied to the parser, so UI:R; native memory corruption justifies high C/I/A.
Primary rating from Vendor (https://github.com/equinor/resdata).
CVSS VectorVendor: https://github.com/equinor/resdata
Lifecycle Timeline
3DescriptionCVE.org
Impact
Prior to version 6.2.9 resdata would not correctly validate input in GRDECL files. The severity rating assumes that resdata is used to parse untrused files in a networking context such as a webservice.
Patches
The bug has been patched starting with version 6.2.9.
AnalysisAI
Memory-corruption in Equinor's resdata library before 6.2.9 lets a crafted GRDECL reservoir-model file trigger a classic buffer overflow, out-of-bounds read, improper array indexing, and NULL-pointer dereference during parsing. Any application that feeds untrusted GRDECL input to resdata - the maintainer explicitly rates the 9.8 severity for a networked webservice that parses attacker-supplied files - is exposed to memory corruption that can lead to crashes, information disclosure, or potentially code execution. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the target application parse an attacker-controlled GRDECL file with resdata prior to 6.2.9; the specific trigger is malformed GRDECL keyword data (unbounded keyword size, or out-of-range corsnum/actnum array indices) that the parser fails to validate. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals conflict and must be read together. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: 6.2.9 - upgrade the resdata package to 6.2.9 or later (pip install --upgrade 'resdata>=6.2.9'); see the release at https://github.com/equinor/resdata/releases/tag/6.2.9 and advisory GHSA-pr85-w493-9w3x. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all systems using resdata library and identify which applications parse GRDECL files from network sources or untrusted inputs. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-120 – Classic Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today