{"schemaVersion":3,"id":"USN-8812-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"gdal vulnerabilities\n\nIt was discovered that GDAL incorrectly handled certain netCDF files. An\nattacker could possibly use this issue to execute arbitrary code. This issue\nonly affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS.\n(CVE-2026-49014)\n\nIt was discovered that GDAL incorrectly handled certain HDF-EOS files. An\nattacker could possibly use this issue to cause a crash or execute arbitrary\ncode. (CVE-2026-8086, CVE-2026-8087, CVE-2026-8212, CVE-2026-8213)\n\nIt was discovered that GDAL incorrectly handled certain HDF-EOS file\nmetadata. An attacker could possibly use this issue to cause GDAL to crash,\nresulting in a denial of service. (CVE-2026-8084, CVE-2026-8088)","dates":{"published":"2026-09-24T11:38:56.000Z","modified":"2026-09-25T00:43:11.990Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"gdal","name":"gdal","label":"gdal","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/gdal","purlType":"deb","versions":[{"text":"< 1.10.1+dfsg-5ubuntu1+esm3","noFixRecorded":false,"fixedIn":null},{"text":"< 1.11.3+dfsg-3ubuntu0.1~esm2","noFixRecorded":false,"fixedIn":null},{"text":"< 2.2.3+dfsg-2ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 3.0.4+dfsg-1ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 3.4.1+dfsg-1ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 3.8.4+dfsg-3ubuntu3+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 3.12.2+dfsg-1ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.10.1+dfsg-5ubuntu1+esm3 | < 1.11.3+dfsg-3ubuntu0.1~esm2 | < 2.2.3+dfsg-2ubuntu0.1~esm1 | < 3.0.4+dfsg-1ubuntu0.1~esm1 | < 3.4.1+dfsg-1ubuntu0.1~esm1 | < 3.8.4+dfsg-3ubuntu3+esm1 | < 3.12.2+dfsg-1ubuntu0.1~esm1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-8812-1","label":"ubuntu.com/security/notices/USN-8812-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-8084","label":"ubuntu.com/security/CVE-2026-8084","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-8086","label":"ubuntu.com/security/CVE-2026-8086","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-8087","label":"ubuntu.com/security/CVE-2026-8087","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-8088","label":"ubuntu.com/security/CVE-2026-8088","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-8212","label":"ubuntu.com/security/CVE-2026-8212","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-8213","label":"ubuntu.com/security/CVE-2026-8213","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-49014","label":"ubuntu.com/security/CVE-2026-49014","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2026-49014","CVE-2026-8084","CVE-2026-8086","CVE-2026-8087","CVE-2026-8088","CVE-2026-8212","CVE-2026-8213"],"downstream":[],"duplicates":[],"related":["CVE-2026-49014","CVE-2026-8084","CVE-2026-8086","CVE-2026-8087","CVE-2026-8088","CVE-2026-8212","CVE-2026-8213"]},"timeline":[{"kind":"published","date":"2026-09-24T11:38:56.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-25T00:43:11.990Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T23:56:59.441Z","stale":false,"partial":false}}