OSV-2026-1198

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/mapserver/OSV-2026-1198.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-1198
Published
2026-08-25T00:18:59.857307Z
Modified
2026-08-25T00:18:59.857603Z
Summary
Stack-buffer-overflow in msLayoutTextSymbol
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=551099259

Crash type: Stack-buffer-overflow READ 4
Crash state:
msLayoutTextSymbol
msWriteErrorImage
msWMSException
References

Affected packages

OSS-Fuzz / mapserver

Package

Name
mapserver
Purl
pkg:generic/mapserver

Affected ranges

Type
GIT
Repo
https://github.com/MapServer/MapServer
Events
Introduced
c2ec9215037703e029fbd64259977aaabfdbb9e7
Fixed
e84d91b4732e35132a28d72ad5f3c962a7acaed5
Fixed
2f88fcd2202ebd643350b63ffad1259b8cc2bbe8

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

fixed_range 
"66fb4b5f3a91ff64dec0249833d72d40f9128537:2f88fcd2202ebd643350b63ffad1259b8cc2bbe8"
introduced_range 
"280a8701b338df5e9e84f1eb0f03b8a396982893:a8ae991083942f156fbcc1ed1b5cefdf72612ba2"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/mapserver/OSV-2026-1198.yaml"