PT-2026-38556 · Osgeo · Gdal
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
OSGeo gdal versions prior to 3.12.4RC1
Description
A heap-based buffer overflow occurs in the
SWnentries() function within the frmts/hdf4/hdf-eos/SWapi.c file. This issue is triggered by the manipulation of the DimensionName argument and requires local access to be exploited.Recommendations
Upgrade to version 3.12.4RC1.
Exploit
Fix
Buffer Overflow
Heap Based Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Gdal