CVE-2026-8086

EUVD-2026-28418
A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4. This issue affects the function SWnentries of the file frmts/hdf4/hdf-eos/SWapi.c. Such manipulation of the argument DimensionName leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. Upgrading to version 3.12.4RC1 is capable of addressing this issue. The name of the patch is 9491e794f1757f08063ea2f7a274ad2994afa636. It is advisable to upgrade the affected component.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 14.91%
Affected Products (NVD)
VendorProductVersion
osgeogdal
𝑥
≤ 3.12.4
osgeogdal
3.13.0:beta1
osgeogdal
3.13.0:beta2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
gdal
bookworm
no-dsa
forky
3.13.3+dfsg-2
fixed
sid
3.13.3+dfsg-2
fixed
trixie
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
gdal
bionic
Fixed in 2.2.3+dfsg-2ubuntu0.1~esm1
released
focal
Fixed in 3.0.4+dfsg-1ubuntu0.1~esm1
released
jammy
Fixed in 3.4.1+dfsg-1ubuntu0.1~esm1
released
noble
Fixed in 3.8.4+dfsg-3ubuntu3+esm1
released
questing
ignored
resolute
Fixed in 3.12.2+dfsg-1ubuntu0.1~esm1
released
stonking
not-affected
trusty
Fixed in 1.10.1+dfsg-5ubuntu1+esm3
released
xenial
Fixed in 1.11.3+dfsg-3ubuntu0.1~esm2
released
Common Weakness Enumeration
References
https://github.com/OSGeo/gdal/
https://github.com/OSGeo/gdal/commit/9491e794f1757f08063ea2f7a274ad2994afa636
https://github.com/OSGeo/gdal/issues/14356
https://github.com/OSGeo/gdal/pull/14361
https://github.com/OSGeo/gdal/releases/tag/v3.12.4RC1
https://github.com/biniamf/pocs/tree/main/gdal-swinqdims_bof
https://vuldb.com/submit/808038
https://vuldb.com/vuln/361839
https://vuldb.com/vuln/361839/cti
https://github.com/OSGeo/gdal/issues/14356
https://vuldb.com/submit/808038