OSGeo

Products

ProductCVEsExploitedLatest
gdal7–May 9, 2026

Exploited and recent CVEs

  • CVE-2026-8213 Medium 5.3 OSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow 0.3%
  • CVE-2026-8212 Medium 5.3 OSGeo gdal SWapi.c SWSDfldsrch heap-based overflow 0.2%
  • CVE-2026-8088 Low 3.3 OSGeo gdal GDapi.c GDfieldinfo out-of-bounds 0.2%
  • CVE-2026-8087 Medium 5.3 OSGeo gdal GDapi.c GDnentries heap-based overflow 0.2%
  • CVE-2026-8086 Medium 5.3 OSGeo gdal SWapi.c SWnentries heap-based overflow 0.2%
  • CVE-2026-8084 Low 3.3 OSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-bounds 0.3%
  • CVE-2026-4738 Critical 9.4 GDAL Bundled zlib (inftree9.c) Pointer Offset Optimization Undefined Behavior Allows Heap Corruption or Remote Code Execution 0.3%