CVE-2026-110661: CGNS through 4.5.2 Stack Out-of-Bounds Read via ADFI_read_node_header
CGNS through 4.5.2 contains a stack out-of-bounds read vulnerability in ADFIreadnodeheader that allows attackers to crash applications by supplying crafted ADF node headers. Attackers can craft .cgns or .adf files whose non-NUL-terminated end tag causes ADFIstridxc to scan past disknodedata, crashing tools like cgnslist.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Applications that use affected CGNS versions to process untrusted .cgns or .adf files are exposed. Tools such as cgnslist can be crashed when reading a crafted file.
What does an attacker need to exploit it?
The attacker needs to supply a crafted .cgns or .adf file containing an ADF node header with a non-NUL-terminated end tag. User interaction is required for a local application to open or process that file.
What is the impact of successful exploitation?
Successful exploitation causes an out-of-bounds read while scanning past disk_node_data and can crash the affected application. The provided information describes an availability impact, not confidentiality or integrity impact.
How can exposure be reduced before an update is available?
Avoid processing .cgns and .adf files from untrusted sources with affected CGNS-based tools. Validate file provenance and isolate file-processing workflows where untrusted inputs must be handled.