Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

gdal

11 known vulnerabilities (1 high, 7 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
11 · 1 high, 7 medium
Weekly downloads
77.4K
Dependents
467
Registry
PyPI

Advisories 11

  • In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow.

    Affected: from 3.1.0, fixed in 3.13.1.

  • CVE-2026-8213Medium 4.8

    OSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow

    Affected: fixed in 3.13.0.

  • CVE-2026-8212Medium 4.8

    OSGeo gdal SWapi.c SWSDfldsrch heap-based overflow

    Affected: fixed in 3.13.0RC1; version range not reported.

  • CVE-2026-8088Medium 4.8

    OSGeo gdal GDapi.c GDfieldinfo out-of-bounds

    Affected: fixed in 3.13.0.

  • CVE-2026-8087Medium 4.8

    OSGeo gdal GDapi.c GDnentries heap-based overflow

    Affected: fixed in 3.13.0.

  • CVE-2026-8086Medium 4.8

    OSGeo gdal SWapi.c SWnentries heap-based overflow

    Affected: fixed in 3.13.0.

  • CVE-2026-8084Medium 4.8

    OSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-bounds

    Affected: fixed in 3.13.0.

  • CVE-2025-29480Medium 5.5

    Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release…

    Affected: through 3.10.2-NA.

  • GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile (called from…

    Affected: from 3.3.0, fixed in 3.4.1.

  • netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and…

    Affected: from 2.4.2, fixed in 3.1.0.

  • GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded.

    Affected: fixed in 3.0.2.