Skip to content
OpenAdvisories

Package · Debian

gdal

13 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.4

    GDAL: scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow

    In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow. It reads a geometry attribute into a fixed-size stack buffer without validating the attribute length. The attacker embeds the…

  • High 7.8

    netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_…