PT-2026-38571

CVE-2026-8088

Published

2026-05-07

Updated

2026-09-30

Description by

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OSGeo gdal versions prior to 3.13.0RC1

Description A weakness in the GDfieldinfo() function within the frmts/hdf4/hdf-eos/GDapi.c file can lead to an out-of-bounds read, which occurs when a program reads data past the end of the intended buffer. This issue requires the attack to be launched locally.

Recommendations Upgrade to version 3.13.0RC1.

Exploitability

Exploit

Fix

Impacts

Researchers

Biniam

Vendors

Affected products

Weakness enumeration

CWE-125: Out-of-bounds Read

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer