AZL-86223

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-86223.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-86223

Upstream

CVE-2026-8084

Published

2026-05-07T19:16:02Z

Modified

2026-08-29T05:25:22Z

Summary

CVE-2026-8084 affecting package gdal 3.6.3-2

Details

A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4. This vulnerability affects the function memmove of the file frmts/hdf4/hdf-eos/SWapi.c of the component HDF-EOS Grid File Handler. This manipulation causes out-of-bounds read. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.13.0RC1 is able to resolve this issue. Patch name: a791f70f8eaec540974ec989ca6fb00266b7646c. Upgrading the affected component is advised.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-8084

Affected packages

Azure Linux:3 / gdal

Package

Name: gdal
Purl: pkg:rpm/azure-linux/gdal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

3.6.3-2

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-86223.json"