CVE-2026-8086
1 advisory.
PyPI/gdal CVE-2026-8086: high 7.8
A vulnerability was identified in OSGeo gdal up to 3.13.0dev-4. This issue affects the function SWnentries of the file frmts/hdf4/hdf-eos/SWapi.c. Such manipulation of the argument DimensionName leads
Action: Upgrade gdal to 3.13.0 or later.
pip install gdal==3.13.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.13.0 | - |
Fixed versions
| 3.13.0 |
Sources
- osv: PYSEC-2026-2154
- https://github.com/OSGeo/gdal/
- https://github.com/OSGeo/gdal/releases/tag/v3.12.4RC1
- https://vuldb.com/vuln/361839
- https://vuldb.com/vuln/361839/cti
- https://github.com/OSGeo/gdal/commit/9491e794f1757f08063ea2f7a274ad2994afa636
- https://github.com/OSGeo/gdal/issues/14356
- https://github.com/OSGeo/gdal/pull/14361
- https://github.com/biniamf/pocs/tree/main/gdal-swinqdims_bof
- https://vuldb.com/submit/808038
CVE-2026-8086 · published · modified · JSON