BIT-gdal-2026-8084

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/gdal/BIT-gdal-2026-8084.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-gdal-2026-8084

Aliases

Published

2026-05-11T05:39:24Z

Modified

2026-09-10T16:01:31Z

Summary

OSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-bounds

Details

A vulnerability was determined in OSGeo gdal up to 3.13.0. This vulnerability affects the function memmove of the file frmts/hdf4/hdf-eos/SWapi.c of the component HDF-EOS Grid File Handler. This manipulation causes out-of-bounds read. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.13.0 is able to resolve this issue. Patch name: a791f70f8eaec540974ec989ca6fb00266b7646c. Upgrading the affected component is advised.

Database specific

{
    "cpes":  [
        "cpe:2.3:a:osgeo:gdal:*:*:*:*:*:*:*:*"
    ],
    "severity":  "Medium"
}

References

Affected packages

Bitnami / gdal

Package

Name: gdal
Purl: pkg:bitnami/gdal

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.13.0

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/gdal/BIT-gdal-2026-8084.json"