BIT-gdal-2026-8212

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/gdal/BIT-gdal-2026-8212.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-gdal-2026-8212

Aliases

Published

2026-05-20T11:48:25.675Z

Modified

2026-05-29T22:40:59.551709177Z

Summary

OSGeo gdal SWapi.c SWSDfldsrch heap-based overflow

Details

A flaw has been found in OSGeo gdal up to 3.13.0. Affected by this vulnerability is the function SWSDfldsrch of the file frmts/hdf4/hdf-eos/SWapi.c. Executing a manipulation can lead to heap-based buffer overflow. The attack requires local access. The exploit has been published and may be used. Upgrading to version 3.13.0 addresses this issue. This patch is called 3e04c0385630e4d42517046d9a4967dfccfeb7fd. The affected component should be upgraded.

Database specific

{
    "severity": "Low",
    "cpes": [
        "cpe:2.3:a:osgeo:gdal:*:*:*:*:*:*:*:*"
    ]
}

References

Affected packages

Bitnami / gdal

Package

Name: gdal
Purl: pkg:bitnami/gdal

Severity

1.9 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.13.0

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/gdal/BIT-gdal-2026-8212.json"