PYSEC-2026-3694

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/resdata/PYSEC-2026-3694.yaml
JSON Data
https://api.osv.dev/v1/vulns/PYSEC-2026-3694
Aliases
Published
2026-08-19T11:56:27.903833Z
Modified
2026-08-19T12:45:08.693778249Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read
Details

Impact

Prior to version 6.2.9 resdata would not correctly validate input in GRDECL files. The severity rating assumes that resdata is used to parse untrused files in a networking context such as a webservice.

Patches

The bug has been patched starting with version 6.2.9.

References

Affected packages

PyPI / resdata

Package

Name
resdata
View open source insights on deps.dev
Purl
pkg:pypi/resdata

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.2.9

Affected versions

3.*
3.0.1
4.*
4.0.0
4.1.0
4.1.1
4.1.2
4.2.0
4.2.1
4.2.2
4.2.3
4.2.4
5.*
5.0.0b0
5.0.0
5.0.1
5.0.2
5.0.3
5.1.0
5.1.1
5.1.2
5.1.3
6.*
6.0.1
6.1.0
6.2.0
6.2.2
6.2.3
6.2.4
6.2.5
6.2.6
6.2.7
6.2.8

Database specific

source 
"https://github.com/pypa/advisory-database/blob/main/vulns/resdata/PYSEC-2026-3694.yaml"