What is CVE-2026-53877?

CVE-2026-53877 is a medium-severity vulnerability in Djangoproject Django, classified under Buffer Access with Incorrect Length Value. CVSS score: 4.8/10. Published 2026-07-07.

How severe is CVE-2026-53877?

Medium severity. CVSS v3 base score is 4.8 out of 10.

Vulnerability in Djangoproject Django

CVE-2026-53877

An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `django.contrib.gis.gdal.GDALRaster` over-reads its in-memory buffer when constructed from a bytes object, which can disclose adjacent memory or cause service degrad…

CVSS v3 metric

CVSS v3 base score 4.8 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L.

Affected products

Djangoproject Django — versions 6.0, 6.0.7, 5.2

Weakness classification (CWE)

CWE-805 — Buffer Access with Incorrect Length Value

References

6a34fbeb-21d4-45e7-8e0a-62b95bc12c92 (vendor-advisory)
6a34fbeb-21d4-45e7-8e0a-62b95bc12c92 (mailing-list)
6a34fbeb-21d4-45e7-8e0a-62b95bc12c92 (vendor-advisory)

Frequently asked questions

What is CVE-2026-53877?: CVE-2026-53877 is a medium-severity vulnerability in Djangoproject Django, classified under Buffer Access with Incorrect Length Value. CVSS score: 4.8/10. Published 2026-07-07.
How severe is CVE-2026-53877?: Medium severity. CVSS v3 base score is 4.8 out of 10.