CVE-2025-29480
No fix known EPSS <1%CVSS 5.5
Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced.
Products: osgeo gdal
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | gdal | no fix |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | gdal | no fix |
| Debian 13 | gdal | no fix |
| Debian 14 | gdal | no fix |