Adaguc Server
Monthly
Malformed GeoJSON coordinate parsing in adaguc-server prior to 7.2.2 allows an unauthenticated WMS request to crash the backend worker process via out-of-bounds heap read or NULL pointer dereference in CConvertGeoJSON.cpp. The coordinate parser indexes into coordinate arrays without first verifying the JSON node type or minimum array length, affecting all four major geometry branches: Polygon, LineString, MultiLineString, and MultiPolygon. No active exploitation is confirmed (not in CISA KEV), but four distinct PoC GeoJSON payloads are publicly documented in the fix PR and GitHub advisory GHSA-mwgv-59vv-rp2m, making targeted denial-of-service straightforward once the conditions are met.
Malformed GeoJSON coordinate parsing in adaguc-server prior to 7.2.2 allows an unauthenticated WMS request to crash the backend worker process via out-of-bounds heap read or NULL pointer dereference in CConvertGeoJSON.cpp. The coordinate parser indexes into coordinate arrays without first verifying the JSON node type or minimum array length, affecting all four major geometry branches: Polygon, LineString, MultiLineString, and MultiPolygon. No active exploitation is confirmed (not in CISA KEV), but four distinct PoC GeoJSON payloads are publicly documented in the fix PR and GitHub advisory GHSA-mwgv-59vv-rp2m, making targeted denial-of-service straightforward once the conditions are met.