CVE-2025-29480

medium

Description

Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced.

References

https://github.com/lmarch2/poc/blob/main/gdal/gdal.md

https://github.com/OSGeo/gdal/issues/12188#issuecomment-2847873794

Details

Source: Mitre, NVD

Published: 2025-04-07

Updated: 2025-07-23

Risk Information

CVSS v2

Base Score: 4.6

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H