GD
Product
gdal
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 6Low 0
Watch
Add gdal to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-17545 | 9.8 | Oct 14 | GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded Affected: through 3.0.1 |
| CVE-2026-4738 | 9.4 | Mar 24 | GDAL Bundled zlib (inftree9.c) Pointer Offset Optimization Undefined Behavior Allows Heap Corruption or Remote Code Execution Affected: before 3.11.0 |
| CVE-2019-17546 | 8.8 | Oct 14 | tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a… Affected: through 3.0.1 |
| CVE-2026-49014 | 7.8 | May 27 | In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow Affected: 3.1.0 through 3.13.0 |
| CVE-2026-8087 | 7.8 | May 7 | OSGeo gdal GDapi.c GDnentries heap-based overflow Affected: 3.13.0dev-4 |
| CVE-2026-8086 | 7.8 | May 7 | OSGeo gdal SWapi.c SWnentries heap-based overflow Affected: 3.13.0dev-4 |
| CVE-2019-25050 | 7.8 | Jul 20 | netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (called from… Affected: 2.4.2 through 3.0.4 |
| CVE-2026-8213 | 5.5 | May 9 | OSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow Affected: 3.13.0dev-4 |
| CVE-2026-8212 | 5.5 | May 9 | OSGeo gdal SWapi.c SWSDfldsrch heap-based overflow Affected: 3.13.0dev-4 |
| CVE-2026-8088 | 5.5 | May 7 | OSGeo gdal GDapi.c GDfieldinfo out-of-bounds Affected: 3.13.0dev-4 |
| CVE-2026-8084 | 5.5 | May 7 | OSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-bounds Affected: 3.13.0dev-4 |
| CVE-2025-29480 | 5.5 | Apr 7 | Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function Affected: 3.10.2 |
| CVE-2021-45943 | 5.5 | Jan 1 | GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile (called from PCIDSK::CPCIDSKSegment::ReadFromFile and… Affected: 3.3.0 through 3.4.0 |
Showing 13