CVE-2026-49014

7.4 HIGH 0.1% exploit odds Fix listed Memory safety OS & kernel

What it is

In GDAL 3.1.0 through 3.13.0, scanForGeometryContainers in the netCDF driver allows code execution via a stack-based buffer overflow. It reads a geometry attribute into a fixed-size stack buffer without validating the attribute length. The attacker embeds the exploit as an oversized geometry attribute in a crafted NetCDF file. This achieves arbitrary code execution on the server running GDAL. This is in frmts/netcdf/netcdfsg.cpp.

At a glance

Exploitability: Can be exploited locally on the machine without logging in. High risk of data exposure, data tampering, service disruption.
Exploit odds: 0.1% chance of exploitation in the next 30 days (EPSS).
Fix: A patch, advisory or fixed version is referenced. Upgrade or apply it.

Timeline

2026-05-27 02:16 UTC PublishedDisclosed publicly on CVE.org and NVD
2026-07-24 12:10 UTC Last updatedMost recent change to the record

Details

Published: 2026-05-27 02:16 UTC
Last modified: 2026-07-24 12:10 UTC
Exploit probability: 0.1% · EPSS, next 30 days
Weakness: CWE-121
Record status: Analyzed

Affected

Osgeo Gdal ≤ 3.13.0

Attack profile CVSS 3.1 · 7.4

Attack vector: Local
Complexity: High
Privileges needed: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

Raw vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Download Square Reddit

Fix and advisories

References

NVD record · CVE.org record