Gdal
This hub aggregates every CVE we track for Gdal, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
OSS Librarieslibrary
13
CVEs tracked
1
Critical
4
High
0
In CISA KEV
Severity distribution
MEDIUM6HIGH4LOW2CRITICAL1
Monthly trend
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
0
0
0
7
0
0
0
2024-092026-08
Latest CVEs
The 13 most recently published vulnerabilities affecting Gdal.
- CVE-2026-49014In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow. It reads a geometry attribute into a fixed-size stack buffer wi...7.4
- CVE-2026-8213OSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow5.3
- CVE-2026-8212OSGeo gdal SWapi.c SWSDfldsrch heap-based overflow5.3
- CVE-2026-8088OSGeo gdal GDapi.c GDfieldinfo out-of-bounds3.3
- CVE-2026-8087OSGeo gdal GDapi.c GDnentries heap-based overflow5.3
- CVE-2026-8086OSGeo gdal SWapi.c SWnentries heap-based overflow5.3
- CVE-2026-8084OSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-bounds3.3
- CVE-2025-29480Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is inva...5.5
- CVE-2021-45943GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile (called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegme...5.5
- CVE-2019-25050netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (called from netCDFDataset::~netCDFDataset a...7.8
- CVE-2019-17545GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded.9.8
- CVE-2019-17546tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, re...8.8
- CVE-2005-3581GDAL before 1.3.0-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects ...7.2
Product normalization is registry-driven with AI assist and human review. How it works