CVE-2026-8213: OSGeo gdal Grid File GDapi.c GDSDfldsrch heap-based overflow
A vulnerability has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this issue is the function GDSDfldsrch of the file frmts/hdf4/hdf-eos/GDapi.c of the component Grid File Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 3.13.0RC1 can resolve this issue. The identifier of the patch is 3e04c0385630e4d42517046d9a4967dfccfeb7fd. It is suggested to upgrade the affected component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
OSGeo gdalto a version that resolves this vulnerability.Fixed in 3.13.0RC1Patch 3e04c0385630e4d42517046d9a4967dfccfeb7fd
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8213?
CVE-2026-8213 is classified as a high severity vulnerability due to its potential to cause heap-based buffer overflow, leading to memory corruption.
How does CVE-2026-8213 affect OSGeo GDAL?
CVE-2026-8213 affects OSGeo GDAL versions up to 3.13.0dev-4, specifically impacting the Grid File Handler in the GDSDfldsrch function.
What exploit methods are associated with CVE-2026-8213?
Exploitation of CVE-2026-8213 typically involves manipulating input data that is processed by the GDSDfldsrch function, leading to buffer overflow.
How do I fix CVE-2026-8213?
To fix CVE-2026-8213, upgrade OSGeo GDAL to a version that is higher than 3.13.0dev-4, where the vulnerability has been addressed.
What are the implications of CVE-2026-8213 in a production environment?
The implications of CVE-2026-8213 in a production environment include potential unauthorized access and system instability due to the heap-based overflow.