📦

gdal

Vendor: osgeo

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 2 Remote Access
Total CVEs 13 Total Indexed
Avg. EPSS 0.27% Exploit Prob.
Latest CVE CVE-2026-49014 May 27

Security Vulnerability Index

Page 2 / 2
8.8 CVSS
CVE-2019-17546

tif_getimage.c in LibTIFF through 4.0.10, as used in GDAL through 3.0.1 and other products, has an integer overflow that potentially causes a heap-based buffer overflow via a crafted RGBA image, related to a "Negative-size-param" condition.

EPSS: 0.37%
9.8 CVSS
CVE-2019-17545

GDAL through 3.0.1 has a poolDestroy double free in OGRExpatRealloc in ogr/ogr_expat.cpp when the 10MB threshold is exceeded.

EPSS: 2.25%