GD
Product
gdal
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 6Low 0
Watch
Add gdal to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-17546 | 8.8 | Oct 14 | tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a… Affected: through 3.0.1 |
| CVE-2026-49014 | 7.8 | May 27 | In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow Affected: 3.1.0 through 3.13.0 |
| CVE-2026-8087 | 7.8 | May 7 | OSGeo gdal GDapi.c GDnentries heap-based overflow Affected: 3.13.0dev-4 |
| CVE-2026-8086 | 7.8 | May 7 | OSGeo gdal SWapi.c SWnentries heap-based overflow Affected: 3.13.0dev-4 |
| CVE-2019-25050 | 7.8 | Jul 20 | netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (called from… Affected: 2.4.2 through 3.0.4 |
Showing 5