Gdal
14 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Gdal, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
Gdal CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 1 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 1 |
| 2026-04 | 0 |
| 2026-05 | 7 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 14 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical1
- High4
- Medium6
- Low2
Latest CVEs
The 14 most recently published vulnerabilities affecting Gdal.
- CVE-2026-49014In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow. It reads a geometry attribute into a fixed-size stack buffer wi...7.4
- CVE-2026-8213OSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow5.3
- CVE-2026-8212OSGeo gdal SWapi.c SWSDfldsrch heap-based overflow5.3
- CVE-2026-8088OSGeo gdal GDapi.c GDfieldinfo out-of-bounds3.3
- CVE-2026-8087OSGeo gdal GDapi.c GDnentries heap-based overflow5.3
- CVE-2026-8086OSGeo gdal SWapi.c SWnentries heap-based overflow5.3
- CVE-2026-8084OSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-bounds3.3
- CVE-2026-4738GDAL Bundled zlib (inftree9.c) Pointer Offset Optimization Undefined Behavior Allows Heap Corruption or Remote Code Execution—
- CVE-2025-29480Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is inva...5.5
- CVE-2021-45943GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile (called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegme...5.5
- CVE-2019-25050netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (called from netCDFDataset::~netCDFDataset a...7.8
- CVE-2019-17545GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded.9.8
- CVE-2019-17546tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, re...8.8
- CVE-2005-3581GDAL before 1.3.0-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects ...7.2
Product grouping is registry-driven, with AI assist and human review. How it works