Summary
It was discovered that GDAL incorrectly handled certain netCDF files. An
attacker could possibly use this issue to execute arbitrary code. This issue
only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS.
(CVE-2026-49014)
It was discovered that GDAL incorrectly handled certain HDF-EOS files. An
attacker could possibly use this issue to cause a crash or execute arbitrary
code. (CVE-2026-8086, CVE-2026-8087, CVE-2026-8212, CVE-2026-8213)
It was discovered that GDAL incorrectly handled certain HDF-EOS file
metadata. An attacker could possibly use this issue to cause GDAL to crash,
resulting in a denial of service. (CVE-2026-8084, CVE-2026-8088)
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | gdal | 1.10.1+dfsg-5ubuntu1+esm3 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | gdal | 1.11.3+dfsg-3ubuntu0.1~esm2 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | gdal | 2.2.3+dfsg-2ubuntu0.1~esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | gdal | 3.0.4+dfsg-1ubuntu0.1~esm1 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | gdal | 3.4.1+dfsg-1ubuntu0.1~esm1 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | gdal | 3.8.4+dfsg-3ubuntu3+esm1 |
| Ubuntu · Pro 26.04 LTS Pro:26.04:LTS | gdal | 3.12.2+dfsg-1ubuntu0.1~esm1 |
Vulnerabilities 7
-
High 7.4
GDAL: scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow
In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow. It reads a geometry attribute into a fixed-size stack buffer without validating the attribute length. The attacker embeds the…
-
Medium 5.3
OSGeo gdal SWapi.c SWnentries heap-based overflow
A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4. This issue affects the function SWnentries of the file frmts/hdf4/hdf-eos/SWapi.c. Such manipulation of the argument DimensionName leads to heap-based buffer overflow. The attack must be carried …
-
Medium 5.3
OSGeo gdal GDapi.c GDnentries heap-based overflow
A security flaw has been discovered in OSGeo gdal up to 3.13.0dev-4. Impacted is the function GDnentries of the file frmts/hdf4/hdf-eos/GDapi.c. Performing a manipulation of the argument DataFieldName results in heap-based buffer overflow. The attack must be …
-
Medium 5.3
OSGeo gdal SWapi.c SWSDfldsrch heap-based overflow
A flaw has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this vulnerability is the function SWSDfldsrch of the file frmts/hdf4/hdf-eos/SWapi.c. Executing a manipulation can lead to heap-based buffer overflow. The attack requires local access. The ex…
-
Medium 5.3
OSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow
A vulnerability has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this issue is the function GDSDfldsrch of the file frmts/hdf4/hdf-eos/GDapi.c of the component Grid File Handler. The manipulation leads to heap-based buffer overflow. An attack has t…
-
Low 3.3
OSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-bounds
A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4. This vulnerability affects the function memmove of the file frmts/hdf4/hdf-eos/SWapi.c of the component HDF-EOS Grid File Handler. This manipulation causes out-of-bounds read. The attack is restr…
-
Low 3.3
OSGeo gdal GDapi.c GDfieldinfo out-of-bounds
A weakness has been identified in OSGeo gdal up to 3.13.0dev-4. The affected element is the function GDfieldinfo of the file frmts/hdf4/hdf-eos/GDapi.c. Executing a manipulation can lead to out-of-bounds read. The attack needs to be launched locally. The expl…
References
-
report
https://ubuntu.com/security/CVE-2026-8084
-
report
https://ubuntu.com/security/CVE-2026-8086
-
report
https://ubuntu.com/security/CVE-2026-8087
-
report
https://ubuntu.com/security/CVE-2026-8088
-
report
https://ubuntu.com/security/CVE-2026-8212
-
report
https://ubuntu.com/security/CVE-2026-8213
-
report
https://ubuntu.com/security/CVE-2026-49014