Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-25050
7.8
HIGHCVSS v3
Published
July 20, 2021
CVSS v2
4.6 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (called from netCDFDataset::~netCDFDataset and netCDFDataset::~netCDFDataset).
OSGeo/gdal
GitHubGDAL is an open source MIT licensed translator library for raster and vector geospatial data formats.
GitHubGDAL is an open source MIT licensed translator library for raster and vector geospatial data formats.>= 2.4.2, <= 3.0.4NVD