Netcdf
Monthly
Code execution in NSF Unidata NetCDF-C can be triggered when a user opens or processes a crafted NetCDF file containing an oversized attribute name; the flaw is a stack-based buffer overflow (CWE-121) in attribute-name parsing. The assessed CVSS 3.0 score is 7.8 with AV:L/PR:N/UI:R, so attack delivery is local and requires user interaction, and no public exploit code or CISA KEV entry was identified at time of analysis (EPSS 0.35%).
Heap-based buffer overflow in NSF Unidata NetCDF-C's dimension-name parsing allows code execution in the context of the current user when a victim opens a crafted NetCDF file or a page that serves one. The CVSS 7.8 vector is local (AV:L) with mandatory user interaction (UI:R) and no scope change (S:U), so exposure is concentrated in workflows that routinely parse untrusted scientific data rather than network services. No public exploit was identified at the time of analysis, and EPSS is low at 0.35% (27th percentile); the CPE has no version restriction, so NetCDF-C installations should be treated as potentially affected until a fixed release is confirmed.
A stack-based buffer overflow in NSF Unidata NetCDF-C occurs when parsing a variable name longer than the library's fixed-length stack buffer, allowing arbitrary code execution in the context of the user running the affected application. The flaw is rated CVSS 7.8 but requires the victim to open a malicious NetCDF file (or visit a page that delivers one) in an application built on the library - the vector is local with mandatory user interaction (AV:L/AC:L/PR:N/UI:R/S:U), so there is no server-side or autonomous network path, and no authentication is required. No public exploit code or confirmed active exploitation was identified at time of analysis, and EPSS is low at roughly 0.35% (27th percentile), making this a genuine code-execution risk gated by social engineering rather than an urgent widespread-threat priority.
Integer overflow in NSF Unidata NetCDF-C during parsing of NC variable definitions can lead to arbitrary code execution when a user opens or processes a crafted NetCDF file. The CWE-190 flaw stems from insufficient validation of user-supplied data before buffer allocation, allowing code execution with the privileges of the user who opens the file (CVSS 7.8, AV:L/UI:R/PR:N). No public exploit or CISA KEV entry is currently identified, and EPSS is 0.36% (28th percentile), indicating modest real-world urgency despite the high severity.
Stack-based buffer overflow in NSF Unidata NetCDF-C's time-unit parsing routine allows arbitrary code execution at the privilege of the current user when a victim opens a crafted NetCDF file. Exploitation is gated by user interaction (UI:R) and a local attack vector (AV:L): the attacker must deliver a malicious file or page that the target then parses, there is no network-service exposure and no automatic trigger, though no privileges are required (PR:N) and no non-default configuration is indicated. No public exploit code and no confirmed active exploitation were identified at time of analysis, and EPSS is low (0.35%, 27th percentile), consistent with a moderate-priority issue rather than a mass-exploitation threat; the ZDI advisory ZDI-25-1153 (ZDI-CAN-27273) documents the disclosure.
Code execution in NSF Unidata NetCDF-C can be triggered when a user opens or processes a crafted NetCDF file containing an oversized attribute name; the flaw is a stack-based buffer overflow (CWE-121) in attribute-name parsing. The assessed CVSS 3.0 score is 7.8 with AV:L/PR:N/UI:R, so attack delivery is local and requires user interaction, and no public exploit code or CISA KEV entry was identified at time of analysis (EPSS 0.35%).
Heap-based buffer overflow in NSF Unidata NetCDF-C's dimension-name parsing allows code execution in the context of the current user when a victim opens a crafted NetCDF file or a page that serves one. The CVSS 7.8 vector is local (AV:L) with mandatory user interaction (UI:R) and no scope change (S:U), so exposure is concentrated in workflows that routinely parse untrusted scientific data rather than network services. No public exploit was identified at the time of analysis, and EPSS is low at 0.35% (27th percentile); the CPE has no version restriction, so NetCDF-C installations should be treated as potentially affected until a fixed release is confirmed.
A stack-based buffer overflow in NSF Unidata NetCDF-C occurs when parsing a variable name longer than the library's fixed-length stack buffer, allowing arbitrary code execution in the context of the user running the affected application. The flaw is rated CVSS 7.8 but requires the victim to open a malicious NetCDF file (or visit a page that delivers one) in an application built on the library - the vector is local with mandatory user interaction (AV:L/AC:L/PR:N/UI:R/S:U), so there is no server-side or autonomous network path, and no authentication is required. No public exploit code or confirmed active exploitation was identified at time of analysis, and EPSS is low at roughly 0.35% (27th percentile), making this a genuine code-execution risk gated by social engineering rather than an urgent widespread-threat priority.
Integer overflow in NSF Unidata NetCDF-C during parsing of NC variable definitions can lead to arbitrary code execution when a user opens or processes a crafted NetCDF file. The CWE-190 flaw stems from insufficient validation of user-supplied data before buffer allocation, allowing code execution with the privileges of the user who opens the file (CVSS 7.8, AV:L/UI:R/PR:N). No public exploit or CISA KEV entry is currently identified, and EPSS is 0.36% (28th percentile), indicating modest real-world urgency despite the high severity.
Stack-based buffer overflow in NSF Unidata NetCDF-C's time-unit parsing routine allows arbitrary code execution at the privilege of the current user when a victim opens a crafted NetCDF file. Exploitation is gated by user interaction (UI:R) and a local attack vector (AV:L): the attacker must deliver a malicious file or page that the target then parses, there is no network-service exposure and no automatic trigger, though no privileges are required (PR:N) and no non-default configuration is indicated. No public exploit code and no confirmed active exploitation were identified at time of analysis, and EPSS is low (0.35%, 27th percentile), consistent with a moderate-priority issue rather than a mass-exploitation threat; the ZDI advisory ZDI-25-1153 (ZDI-CAN-27273) documents the disclosure.