BIT-gdal-2026-8213

See a problem?
Import Source
https://github.com/bitnami/vulndb/tree/main/data/gdal/BIT-gdal-2026-8213.json
JSON Data
https://api.osv.dev/v1/vulns/BIT-gdal-2026-8213
Aliases
Published
2026-05-20T11:48:27Z
Modified
2026-09-10T16:01:31Z
Summary
OSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow
Details

A vulnerability has been found in OSGeo gdal up to 3.13.0. Affected by this issue is the function GDSDfldsrch of the file frmts/hdf4/hdf-eos/GDapi.c of the component Grid File Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 3.13.0 can resolve this issue. The identifier of the patch is 3e04c0385630e4d42517046d9a4967dfccfeb7fd. It is suggested to upgrade the affected component.

Database specific 
{
    "cpes":  [
        "cpe:2.3:a:osgeo:gdal:*:*:*:*:*:*:*:*"
    ],
    "severity":  "Medium"
}
References

Affected packages

Bitnami / gdal

Package

Name
gdal
Purl
pkg:bitnami/gdal

Severity

  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator

Affected ranges

Type
SEMVER
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.13.0

Database specific

source 
"https://github.com/bitnami/vulndb/tree/main/data/gdal/BIT-gdal-2026-8213.json"