Package · Ubuntu

gdal

27 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Critical 9.4

CVE-2026-4738

GDAL Bundled zlib (inftree9.c) Pointer Offset Optimization Undefined Behavior Allows Heap Corruption or Remote Code Execution

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal (frmts/zlib/contrib/infback9 modules). This vulnerability is associated with program files inftree9.C‎. This issue affects gdal: before 3.11.0.

OSGeo gdal gdal gdal Debian Ubuntu Azure Linux Alpine

Mar 24, 2026
Critical 9.8

CVE-2025-61144

libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.

tiff tiff qtwebengine-opensource-src libtiff Debian Ubuntu Azure Linux

Feb 23, 2026
Critical 9.8

CVE-2019-17545

GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exc…

gdal gdal gdal Debian Ubuntu PyPI

Oct 14, 2019