A flaw has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this vulnerability is the function SWSDfldsrch of the file frmts/hdf4/hdf-eos/SWapi.c. Executing a manipulation can lead to heap-based buffer overflow. The attack requires local access. The exploit has been published and may be used. Upgrading to version 3.13.0RC1 addresses this issue. This patch is called 3e04c0385630e4d42517046d9a4967dfccfeb7fd. The affected component should be upgraded.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-8212US | medium5.5 | — | ||
A flaw has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this vulnerability is the function SWSDfldsrch of the file frmts/hdf4/hdf-eos/SWapi.c. Executing a manipulation c… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/OSGeo/gdal/WEB
- https://github.com/OSGeo/gdal/commit/3e04c0385630e4d42517046d9a4967dfccfeb7fdFIX
- https://github.com/OSGeo/gdal/issues/14398REPORT
- https://github.com/OSGeo/gdal/releases/tag/v3.13.0RC1WEB
- https://github.com/advisories/GHSA-r5m4-5vww-w9f5ADVISORY
- https://github.com/biniamf/pocs/tree/main/gdal-swsdfldsrch_oob-readWEB
- https://vuldb.com/submit/808127WEB
- https://vuldb.com/vuln/362429WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan