Gdal

2 CVEs product

Monthly

CVE-2026-4738 CRITICAL PATCH Act Now

A buffer overflow vulnerability in GDAL versions before 3.11.0 within the zlib infback9 module allows remote attackers to achieve arbitrary code execution or cause denial of service through specially crafted compressed data. The vulnerability requires user interaction to trigger but has a network attack vector with no authentication needed. A patch is available and should be applied immediately to affected GDAL installations.

Buffer Overflow Gdal
NVD GitHub VulDB
CVSS 4.0
9.4
EPSS
0.0%
CVE-2025-29480 MEDIUM POC This Month

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Gdal Redhat Suse
NVD GitHub
CVSS 3.1
5.5
EPSS
0.1%
CVE-2026-4738
EPSS 0% CVSS 9.4
CRITICAL PATCH Act Now

A buffer overflow vulnerability in GDAL versions before 3.11.0 within the zlib infback9 module allows remote attackers to achieve arbitrary code execution or cause denial of service through specially crafted compressed data. The vulnerability requires user interaction to trigger but has a network attack vector with no authentication needed. A patch is available and should be applied immediately to affected GDAL installations.

Buffer Overflow Gdal
NVD GitHub VulDB
CVE-2025-29480
EPSS 0% CVSS 5.5
MEDIUM POC This Month

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Gdal +2
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy