Buffer overflow in Osgeo Gdal
CVE-2026-4738
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal (frmts/zlib/contrib/infback9 modules). This vulnerability is associated with program files inftree9.C. This issue affects gdal: before 3…
Vulnerability class: Buffer Overflow
EPSS: 0.001 (19.8th percentile) — read the EPSS interpretation.
Affected products
- Osgeo Gdal — versions 0
Weakness classification (CWE)
References
- github.com/OSGeo/gdal/pull/12244 (patch)