Logo
›
›vulnerability›CVE-2026-8212
Name
CVE-2026-8212
Source
NVD ( link)Debian ( link)
Description
A flaw has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this vulnerability is the function SWSDfldsrch of the file frmts/hdf4/hdf-eos/SWapi.c. Executing a manipulation can lead to heap-based buffer overflow. The attack requires local access. The exploit has been published and may be used. Upgrading to version 3.13.0RC1 addresses this issue. This patch is called 3e04c0385630e4d42517046d9a4967dfccfeb7fd. The affected component should be upgraded.
CWEs
CWE-119 CWE-125
Published Date
Updated Date
Workaround
-
Advisories
https://github.com/OSGeo/gdal/Product
https://github.com/OSGeo/gdal/commit/3e04c0385630e4d42517046d9a4967dfccfeb7fdPatch
https://github.com/OSGeo/gdal/issues/14398Exploit
https://github.com/OSGeo/gdal/releases/tag/v3.13.0RC1Patch
https://github.com/biniamf/pocs/tree/main/gdal-swsdfldsrch_oob-readExploit
https://vuldb.com/submit/808127Exploit
https://vuldb.com/vuln/362429VDB Entry
https://vuldb.com/vuln/362429/ctiPermissions Required

Analysis#

Affected Component
Analysis
gdal
Exploitable

Vulnerability Ratings#

1.9
CVSSv4
5.3
CVSSv31
5.5
CVSSv31
4.3
CVSSv2
NaN
other

Others affected component#

Name
Project
Project Version
Version
Status
gdal
buildroot
master
3.11.4
Exploitable