OSGeo gdal
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-8213 | 3.13.0dev-4 | OSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow | MEDIUM 4.8 | 0.3 % | ||
| CVE-2026-8212 | 3.13.0dev-4 | OSGeo gdal SWapi.c SWSDfldsrch heap-based overflow | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-8088 | 3.13.0dev-4 | OSGeo gdal GDapi.c GDfieldinfo out-of-bounds | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-8087 | 3.13.0dev-4 | OSGeo gdal GDapi.c GDnentries heap-based overflow | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-8086 | 3.13.0dev-4 | OSGeo gdal SWapi.c SWnentries heap-based overflow | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-8084 | 3.13.0dev-4 | OSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-bounds | MEDIUM 4.8 | 0.3 % | ||
| CVE-2026-4738 | < 3.11.0 | GDAL Bundled zlib (inftree9.c) Pointer Offset Optimization Undefined Behavior Allows Heap Corruption or Remote Code Execution | CRITICAL 9.4 | 0.3 % |