{"action":"No fix published. Pin and monitor.","affected":[],"component":"gdal","cve_ids":["CVE-2026-8212"],"ecosystem":"PyPI","epss":0.00205,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-r5m4-5vww-w9f5","id":"tcs_01M5KH95TQ3Y9BJ6ZCXEA9JBYR","modified_at":"2026-06-10T17:01:17.871040217Z","published_at":"2026-05-09T23:16:33.113Z","references":["https://osv.dev/vulnerability/PYSEC-2026-4","https://github.com/OSGeo/gdal/","https://github.com/OSGeo/gdal/releases/tag/v3.13.0RC1","https://github.com/biniamf/pocs/tree/main/gdal-swsdfldsrch_oob-read","https://vuldb.com/submit/808127","https://vuldb.com/vuln/362429","https://vuldb.com/vuln/362429/cti","https://github.com/OSGeo/gdal/issues/14398","https://github.com/OSGeo/gdal/commit/3e04c0385630e4d42517046d9a4967dfccfeb7fd","https://github.com/advisories/GHSA-r5m4-5vww-w9f5"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-4","url":"https://osv.dev/vulnerability/PYSEC-2026-4"}],"summary":"A flaw has been found in OSGeo gdal up to 3.13.0dev-4. Affected by this vulnerability is the function SWSDfldsrch of the file frmts/hdf4/hdf-eos/SWapi.c. Executing a manipulation can lead to heap-base"}