CVE-2019-25050

netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup…

published July 20, 2021

CVSS
—
EPSS
0%
Percentile
27.4
In the wild
Unconfirmed
What it is

netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup (called from netCDFDataset::~netCDFDataset and netCDFDataset::~netCDFDataset).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00350 · 27.4th percentile
Published
2021-07-20T06:46Z
EPSS history
Timeline
  • 20 JUL 06:46Z
    netCDF in GDAL 2.4.2 through 3.0.4 has a stack-based buffer overflow in nc4_get_att (called from nc4_get_att_tc and nc_get_att_text) and in uffd_cleanup…
    cvelistv5