CVE-2026-8084: OSGeo gdal HDF-EOS Grid File SWapi.c memmove out-of-bounds
A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4. This vulnerability affects the function memmove of the file frmts/hdf4/hdf-eos/SWapi.c of the component HDF-EOS Grid File Handler. This manipulation causes out-of-bounds read. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.13.0RC1 is able to resolve this issue. Patch name: a791f70f8eaec540974ec989ca6fb00266b7646c. Upgrading the affected component is advised.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OSGeo gdal (HDF-EOS Grid File Handler)to a version that resolves this vulnerability.Fixed in 3.13.0RC1Patch a791f70f8eaec540974ec989ca6fb00266b7646c
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8084?
CVE-2026-8084 has a medium severity level due to its potential impact on memory manipulation.
How do I fix CVE-2026-8084?
To fix CVE-2026-8084, upgrade to the latest version of OSGeo GDAL, ensuring you are above version 3.13.0dev-4.
What are the potential consequences of CVE-2026-8084?
CVE-2026-8084 can lead to out-of-bounds read vulnerabilities, potentially exposing sensitive data.
Which versions of OSGeo GDAL are affected by CVE-2026-8084?
CVE-2026-8084 affects OSGeo GDAL versions up to and including 3.13.0dev-4.
Is CVE-2026-8084 exploitable?
Yes, CVE-2026-8084 is considered exploitable under certain conditions, allowing for potential memory corruption.