PyPI/gdal CVE-2026-8212: medium 5.3, EPSS 0.21%

OSGeo gdal has a heap-based buffer overflow

Action: Upgrade gdal to 3.13.0RC1 or later.

pip install gdal==3.13.0RC1

Affected

Fixed versions

Sources

• osv: GHSA-r5m4-5vww-w9f5
• https://nvd.nist.gov/vuln/detail/CVE-2026-8212
• https://github.com/OSGeo/gdal/issues/14398
• https://github.com/OSGeo/gdal/commit/3e04c0385630e4d42517046d9a4967dfccfeb7fd
• https://github.com/OSGeo/gdal
• https://github.com/OSGeo/gdal/releases/tag/v3.13.0RC1
• https://github.com/biniamf/pocs/tree/main/gdal-swsdfldsrch_oob-read
• https://github.com/pypa/advisory-database/tree/main/vulns/gdal/PYSEC-2026-4.yaml
• https://vuldb.com/submit/808127
• https://vuldb.com/vuln/362429
• https://vuldb.com/vuln/362429/cti

CVE-2026-8212 · published 2026-05-10T00:33:21Z · modified 2026-09-10T03:50:55.269820363Z · JSON