https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 10:44:35 +0000 https://cve.radiocsirt.org/vuln/cve-2026-49014 <p><strong>Affected:</strong> GDAL</p> <p>In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow. It reads a geometry attribute into a fixed-size stack buffer without validating the attribute length. The attacker embeds the exploit as an oversized geometry attribute in a crafted NetCDF file. This achieves arbitrary code execution on the server running GDAL. This is in frmts/netcdf/netcdfsg.cpp.</p> <p><strong>Affected:</strong> GDAL</p> <p>In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow. It reads a geometry attribute into a fixed-size stack buffer without validating the attribute length. The attacker embeds the exploit as an oversized geometry attribute in a crafted NetCDF file. This achieves arbitrary code execution on the server running GDAL. This is in frmts/netcdf/netcdfsg.cpp.</p> https://cve.radiocsirt.org/vuln/cve-2026-49014 https://cve.radiocsirt.org/vuln/usn-8812-1 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: gdal, Ubuntu:Pro:16.04:LTS: gdal, Ubuntu:Pro:18.04:LTS: gdal, Ubuntu:Pro:20.04:LTS: gdal, Ubuntu:Pro:22.04:LTS: gdal, Ubuntu:Pro:24.04:LTS: gdal, Ubuntu:Pro:26.04:LTS: gdal</p> <p>It was discovered that GDAL incorrectly handled certain netCDF files. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-49014)</p> <p>It was discovered that GDAL incorrectly handled certain HDF-EOS files. An attacker could possibly use this issue to cause a crash or execute arbitrary code. (CVE-2026-8086, CVE-2026-8087, CVE-2026-8212, CVE-2026-8213)</p> <p>It was discovered that GDAL incorrectly handled certain HDF-EOS file metadata. An attacker could possibly use this issue to cause GDAL to crash, resulting in a denial of service. (CVE-2026-8084, CVE-2026-8088)</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: gdal, Ubuntu:Pro:16.04:LTS: gdal, Ubuntu:Pro:18.04:LTS: gdal, Ubuntu:Pro:20.04:LTS: gdal, Ubuntu:Pro:22.04:LTS: gdal, Ubuntu:Pro:24.04:LTS: gdal, Ubuntu:Pro:26.04:LTS: gdal</p> <p>It was discovered that GDAL incorrectly handled certain netCDF files. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-49014)</p> <p>It was discovered that GDAL incorrectly handled certain HDF-EOS files. An attacker could possibly use this issue to cause a crash or execute arbitrary code. (CVE-2026-8086, CVE-2026-8087, CVE-2026-8212, CVE-2026-8213)</p> <p>It was discovered that GDAL incorrectly handled certain HDF-EOS file metadata. An attacker could possibly use this issue to cause GDAL to crash, resulting in a denial of service. (CVE-2026-8084, CVE-2026-8088)</p> https://cve.radiocsirt.org/vuln/usn-8812-1